diff --git a/src/backend/InvenTree/InvenTree/permissions.py b/src/backend/InvenTree/InvenTree/permissions.py index c47c8ab021..152448cc0d 100644 --- a/src/backend/InvenTree/InvenTree/permissions.py +++ b/src/backend/InvenTree/InvenTree/permissions.py @@ -79,6 +79,9 @@ class RolePermission(permissions.BasePermission): # Extract the model name associated with this request model = get_model_for_view(view) + if model is None: + return True + app_label = model._meta.app_label model_name = model._meta.model_name diff --git a/src/backend/InvenTree/users/api.py b/src/backend/InvenTree/users/api.py index 8707511a22..bee724bb53 100644 --- a/src/backend/InvenTree/users/api.py +++ b/src/backend/InvenTree/users/api.py @@ -154,6 +154,13 @@ class MeUserDetail(RetrieveUpdateAPI, UserDetail): """Always return the current user object.""" return self.request.user + def get_permission_model(self): + """Return the model for the permission check. + + Note that for this endpoint, the current user can *always* edit their own details. + """ + return None + class UserList(ListCreateAPI): """List endpoint for detail on all users."""