return permission denied when anonymous user tries to use REST
diff --git a/planetstack/core/xoslib/methods/tenantview.py b/planetstack/core/xoslib/methods/tenantview.py
index 44db514..5694374 100644
--- a/planetstack/core/xoslib/methods/tenantview.py
+++ b/planetstack/core/xoslib/methods/tenantview.py
@@ -7,6 +7,7 @@
from core.models import *
from django.forms import widgets
from syndicate_storage.models import Volume
+from django.core.exceptions import PermissionDenied
# This REST API endpoint contains a bunch of misc information that the
# tenant view needs to display
@@ -92,6 +93,8 @@
method_name = "tenantview"
def get(self, request, format=None):
+ if (not request.user.is_authenticated()):
+ raise PermissionDenied("You must be authenticated in order to use this API")
return Response( getTenantViewDict(request.user) )
class TenantDetail(APIView):
@@ -99,5 +102,7 @@
method_name = "tenantview"
def get(self, request, format=None, pk=0):
+ if (not request.user.is_authenticated()):
+ raise PermissionDenied("You must be authenticated in order to use this API")
return Response( [getTenantViewDict(request.user)] )