-
Notifications
You must be signed in to change notification settings - Fork 5
Expand file tree
/
Copy pathCHANGELOG
More file actions
66 lines (44 loc) · 1.5 KB
/
CHANGELOG
File metadata and controls
66 lines (44 loc) · 1.5 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
1.1.0
=====
- Add setting `REST_FRAMEWORK_ROLES.DEFAULT_EXCEPTION_CLASS`
- Allow setting exceptions in `view_permissions` per role for adhoc behaviour
1.0.6
=====
- Fix so patched views preserve original view's metadata like docstrings
1.0.5
=====
- Better integration with APIView
1.0.4
=====
- Minor cleanup and documentation updates
1.0.3
=====
- Hotfix to not raise error when SKIP_MODULES setting used
1.0.2
=====
- Fix so view instance passed instead of request handler function in role checkers
1.0.1
=====
- Skip patching django.contrib modules by default
- Add SKIP_MODULES setting
1.0.0
=====
This version is a major refactoring to only support latest DRF and ease future maintenace, plus ensuring least privilege by default.
Dropped features
- Officially only support DRF (vanilla Django might still work fine but not thoroughly tested)
- Totally drop support for function-based views
- Totally drop support for 'allowed' and 'disallowed' decorators
New features
- Least privileges by default
- Grouping views in view_permissions
- Caching in redirections so same checks never occur twice
- Too deep redirections now detected and will throw exception
Changes
- Rename setting 'roles' to 'ROLES'
- Now permission_classes and view_permissions are mutually exclusive in view classes
- Framework now patches DRF's DEFAULT_PERMISSION_CLASSES with DenyAll
0.4.1
=====
- Support for Django 3
- Support for Django REST Framework
- Support both class-based and function-based views