Security Release: REST framework 3.11.2

2020-09-30 Thread Tom Christie
Django REST framework 3.11.2 has just been released . This release *resolves a potential XSS security issue affecting the browsable API.* The issue affects REST framework versions prior to 3.11.2. It does not affect the versio

Re: action methods is not allowed to have more methods rather than their viewsets

2020-09-30 Thread Carl Nobile
As I said I don't use ViewSets, but if you add in mixins that cause the signature of the ViewSet to change it cannot easily and automatically generate schemas--at least this is my understanding. The mixins are used in generic views and are not generally needed when defining your own views except un

How to make my own model authentication and authorizations in Django Rest Framework

2020-09-30 Thread Osama Imran
Hello All, I am new to Django rest frame work and my questions is how I can apply Authentication and Authorizations to any model for API view which I have developed from scratch and what is the best way to implement these concepts. please help. Thank you -- You received this message becau

Re: How to make my own model authentication and authorizations in Django Rest Framework

2020-09-30 Thread Carl Nobile
It's always best to read the docs before asking questions here because in many instances there are many answers to your questions. Here's a link to the DRF docs for authentication: https://www.django-rest-framework.org/tutorial/4-authentication-and-permissions/ ~Carl On Wed, Sep 30, 2020 at 2:45

Re: How to make my own model authentication and authorizations in Django Rest Framework

2020-09-30 Thread Osama Imran
But I want to know people approaches how they proceed in this scenario as you know there are tons of tutorial available but not suitable for my requirements. On Thu, 1 Oct 2020, 5:26 am Carl Nobile, wrote: > It's always best to read the docs before asking questions here because in > many instanc