Fix (beta): respect disable state for suggest endpoint, require change perms (#12942)

2026-09-11 20:28:01 +00:00 · 2026-06-05 14:16:53 +00:00
parent fa0c4368d7
commit 449fd97b1f
4 changed files with 24 additions and 4 deletions
@@ -1400,7 +1400,7 @@ class DocumentViewSet(
        )
        if request.user is not None and not has_perms_owner_aware(
            request.user,
-            "view_document",
+            "change_document",
            doc,
        ):
            return HttpResponseForbidden("Insufficient permissions")
@@ -1460,7 +1460,7 @@ class DocumentViewSet(
        )
        if request.user is not None and not has_perms_owner_aware(
            request.user,
-            "view_document",
+            "change_document",
            doc,
        ):
            return HttpResponseForbidden("Insufficient permissions")