remove unauthorised access to update/create views

acdh-oeaw · Nov 21, 2024 · 8f8841e · 8f8841e
1 parent 809a46d
commit 8f8841e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/apis_ontology/settings/server_settings.py b/apis_ontology/settings/server_settings.py
@@ -70,7 +70,8 @@
 
 def apis_view_passes_test(view) -> bool:
     # Temporary hack
-    return True
+    if view.permission_action_required == "view":
+        return True
 
 
 APIS_LIST_VIEWS_ALLOWED = True