fixed DRF object permission

2020-06-17 12:12:42 +02:00
parent 4ee5a4fd9f
commit 18bfecb026
3 changed files with 27 additions and 5 deletions
--- a/cookbook/serializer.py
+++ b/cookbook/serializer.py
@ -15,6 +15,7 @@ class UserPreferenceSerializer(serializers.ModelSerializer):
    class Meta:
        model = UserPreference
        fields = '__all__'
+        read_only_fields = ['user']


 class StorageSerializer(serializers.ModelSerializer):
@ -81,6 +82,7 @@ class RecipeBookSerializer(serializers.ModelSerializer):
    class Meta:
        model = RecipeBook
        fields = '__all__'
+        read_only_fields = ['id', 'created_by']


 class RecipeBookEntrySerializer(serializers.ModelSerializer):