Oliver 12fcccb5a6 Fix API endpoint permission for the "AttachmentMixin" class (#3218) ...

* Fix API endpoint permission for the "AttachmentMixin" class

- Any authenticated user could perform CREATE and UPDATE operations on attachments
- Could be performed via the browsable DRF API
- Could also be performed via the front-end (with some advaned jiggering of OPTIONS code)

* Show or hide buttons depending on the permissions of the user

* Add shortcut for table permission check

2022-06-18 14:48:09 +10:00

1017 B

Raw Blame History

View Raw