Merge pull request #2 from jakemcdermott/handle-none-obj-permission

Handle none obj permission

Author: jakemcdermott

server/server/api/permissions.py

@@ -19,6 +19,10 @@ def has_permission(self, request, view):
     def has_object_permission(self, request, view, obj=None):
         """Only the author can modify existing instances."""
         is_safe = request.method in SAFE_METHODS
-        is_author = request.user == obj.author
+
+        try:
+            is_author = request.user == obj.author
+        except AttributeError:
+            is_author = False
 
         return is_safe or is_author or request.user.is_superuser

server/server/api/urls.py

@@ -1,4 +1,3 @@
-from django.conf.urls import url, include
 from rest_framework.routers import DefaultRouter
 
 from .views import (