Skip to content

Commit 848d850

Browse files
authored
Merge pull request #872 from sliverc/related_urls_permisison_doc
Add warning to docs on permission check with related urls
2 parents fdceb0a + 2de3c0a commit 848d850

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

Diff for: docs/usage.md

+8
Original file line numberDiff line numberDiff line change
@@ -741,6 +741,14 @@ class OrderSerializer(serializers.HyperlinkedModelSerializer):
741741
}
742742
```
743743

744+
<div class="warning">
745+
<strong>Note:</strong>
746+
Even though with related urls relations are served on different urls there are still served
747+
by the same view. This means that the object permission check is performed on the parent object.
748+
In other words when the parent object is accessible by the user the related object will be as well.
749+
</div>
750+
751+
744752
### RelationshipView
745753
`rest_framework_json_api.views.RelationshipView` is used to build
746754
relationship views (see the

0 commit comments

Comments
 (0)