Hi,

I am using DjangoModelPermissions on my DRF and it does not seem to be 
consistent with the admin's application of model permission. 

For example, I create a new staff user in my django app, and when I login 
with it, I do not see any users, groups or any other models (because I did 
not give it any access). But from DRF, that user can access a list of 
users, groups, etc. 

Any ideas how to make DRF consistent with django admin?

Thanks,
Franz

-- 
You received this message because you are subscribed to the Google Groups 
"Django REST framework" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-rest-framework/cceddf98-4edc-4a89-b7b5-a88d9e8ee40e%40googlegroups.com.

Reply via email to