Require change perms for endpoint

2026-06-06 13:49:44 +00:00 · 2026-06-05 05:50:08 -07:00
parent 4285715bf2
commit 01dd0645f4
1 changed files with 2 additions and 2 deletions
@@ -1400,7 +1400,7 @@ class DocumentViewSet(
        )
        if request.user is not None and not has_perms_owner_aware(
            request.user,
-            "view_document",
+            "change_document",
            doc,
        ):
            return HttpResponseForbidden("Insufficient permissions")
@@ -1460,7 +1460,7 @@ class DocumentViewSet(
        )
        if request.user is not None and not has_perms_owner_aware(
            request.user,
-            "view_document",
+            "change_document",
            doc,
        ):
            return HttpResponseForbidden("Insufficient permissions")