Closed scanner closed 12 months ago
If we are using DRYRestPermissions and have denied a user 'write' permission so that they can not create an object (but allow them 'update' permission) then the rest api does NOT return the object metadata in response to OPTIONS.
So for now allow True on method == PUT.
True
PUT
Fixed by allowing True when method==PUT
If we are using DRYRestPermissions and have denied a user 'write' permission so that they can not create an object (but allow them 'update' permission) then the rest api does NOT return the object metadata in response to OPTIONS.
So for now allow
True
on method ==PUT
.