Now when you trying to upload track you always need to specify uploader field which allows adding tracks on any user's behalf. This is some kind of security leak combined with inconvenience.
It's proposed to rewrite upload view to require authentication and then set uploader field for serializer.
Proposal
Now when you trying to upload track you always need to specify
uploader
field which allows adding tracks on any user's behalf. This is some kind of security leak combined with inconvenience.It's proposed to rewrite upload view to require authentication and then set uploader field for serializer.