joestump / django-ajax

A simple framework for creating AJAX endpoints in Django.
http://github.com/joestump/django-ajax
BSD 3-Clause "New" or "Revised" License
260 stars 54 forks source link

Deny list access unless it's specifically allowed. #55

Closed justinabrahms closed 10 years ago

justinabrahms commented 10 years ago

We weren't properly checking permissions around listing of models.

We will need to bump version (if following semver) because it's technically backwards incompatible.

Before we do that, today I'm going to be changing the API (again) to list view, so might as well do them both at once.