fureunoir/schon
fureunoir/schon
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fixes: UserViewSet.upload_avatar

Browse source
This commit is contained in:
Egor Pavlovich Gorbunov 2025-06-08 14:31:23 +03:00
parent d2fb042c99
commit d0362fe02f
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
vibes_auth/viewsets.py
View file

@ -53,7 +53,7 @@ class UserViewSet(
@action(detail=True, methods=["put"], permission_classes=[IsAuthenticated]) @action(detail=True, methods=["put"], permission_classes=[IsAuthenticated])
@method_decorator(ratelimit(key="ip", rate="2/h" if not DEBUG else "888/h")) @method_decorator(ratelimit(key="ip", rate="2/h" if not DEBUG else "888/h"))
def upload_avatar(self, request): def upload_avatar(self, request, **kwargs):
user = self.get_object() user = self.get_object()
if request.user != user: if request.user != user:
return Response(status=status.HTTP_403_FORBIDDEN) return Response(status=status.HTTP_403_FORBIDDEN)