django - ポスト/パッチ/プットで401を与えるTastypie ManyToManyField

Question

頭がおかしくなりそうなので、これを理解するのを手伝ってください。

私のモデル:

class UserManager(BaseUserManager):
    def create_user(self, email, password, first_name, last_name, year_of_birth, city, gender, country):
        if not email:
            raise ValueError('Users must have an email address')
        if not password:
            raise ValueError('Users must have a password')
        if not first_name:
            raise ValueError('Users must have a first name')
        if not last_name:
            raise ValueError('Users must have a last name')
        if not year_of_birth:
            raise ValueError('Users must have an year of birth')
        if not city:
            raise ValueError('Users must have a city')
        if not gender:
            raise ValueError('Users must have a gender')

        user = self.model(
            email=UserManager.normalize_email(email),
            first_name=first_name,
            last_name=last_name,
            year_of_birth=year_of_birth,
            city=city,
            gender=gender,
            country=country
        )

        user.set_password(password)
        user.save(using=self._db)
        return user

    def create_superuser(self, email, password, first_name, last_name, year_of_birth, city, gender, country):
        user = self.create_user(email,
            password=password,
            first_name=first_name,
            last_name=last_name,
            year_of_birth=year_of_birth,
            city=city,
            gender=gender,
            country=country
        )
        user.is_admin = True
        user.save(using=self._db)
        return user

class Tent(models.Model):
    name = models.CharField(max_length=255)
    brand = models.CharField(max_length=255)
    def __unicode__(self):
        return self.name

GENDER_MALE = 0
GENDER_FEMALE = 1
GENDER_NOT_SPECIFIED = 2

GENDER_CHOICES = (
    (GENDER_MALE, _('male')),
    (GENDER_FEMALE, _('female')),
    (GENDER_NOT_SPECIFIED, _('not specified')),
)

class User(AbstractBaseUser):
    email = models.EmailField(max_length=255, unique=True)
    first_name = models.CharField(max_length=255)
    last_name = models.CharField(max_length=255)
    year_of_birth = models.IntegerField()
    country = models.CharField(max_length=255)
    city = models.CharField(max_length=255)
    gender = models.IntegerField(choices=GENDER_CHOICES, default=GENDER_NOT_SPECIFIED)
    newsletter = models.BooleanField(default=False)

    tents = models.ManyToManyField(Tent, blank=True, null=True)

    is_active = models.BooleanField(default=True)
    is_admin = models.BooleanField(default=False)

    objects = UserManager()

    def get_full_name(self):
        return '%s %s' % self.first_name, self.last_name

    def get_short_name(self):
        return self.first_name

    def __unicode__(self):
        return self.email

    def has_perm(self, perm, obj=None):
        return True

    def has_module_perms(self, app_label):
        return True

    @property
    def is_staff(self):
        return self.is_admin

    USERNAME_FIELD = 'email'
    REQUIRED_FIELDS = ['first_name', 'last_name', 'year_of_birth', 'city', 'country', 'gender']

私のモデル リソース:

class TentResource(ModelResource):
    class Meta:
        queryset = Tent.objects.all()
        resource_name = 'tents'
        allowed_methods = ['get']

class UserResource(ModelResource):
    tents = ManyToManyField(TentResource, 'tents', null=True)

    class Meta:
        queryset = User.objects.all()
        allowed_methods = ['post', 'get', 'patch', 'put']
        excludes = ['password', 'is_active', 'is_admin', 'id', 'last_login']
        resource_name = 'user'
        authentication = ApiKeyAuthentication()
        authorization = Authorization()

    def obj_create(self, bundle, **kwargs):
        try:
            bundle = super(UserResource, self).obj_create(bundle, **kwargs)
            bundle.obj.set_password(bundle.data.get('password'))
            bundle.obj.save() 
        except IntegrityError:
            raise BadRequest(_("A user with that username already exists."))
        return bundle

    def authorized_read_list(self, object_list, bundle):
        return object_list.filter(id=bundle.request.user.id)

テントを含めない限り、データをエンドポイントに簡単に POST してユーザーを作成できるので、次のようにするとうまくいきます。

{
  "year_of_birth" : 1986,
  "newsletter" : false,
  "first_name" : "Morten",
  "city" : "Aalborg",
  "last_name" : "Bøgh",
  "country" : "Denmark",
  "gender" : 1,
  "email" : "morten@lala.dk",
  "password" : "1234"
}

しかし、テント情報を追加すると、単に 401 が返され、理由はありません。

{
  "year_of_birth" : 1986,
  "newsletter" : false,
  "tents" : [
    "/v1/tents/3/",
    "/v1/tents/4/"
  ],
  "first_name" : "Morten",
  "city" : "Aalborg",
  "last_name" : "Bøgh",
  "country" : "Denmark",
  "gender" : 1,
  "email" : "morten@lala.dk",
  "password" : "1234"
}

エラー メッセージが表示されず、ここで迷ってしまいました。皆さんが助けてくれることを願っています。

乾杯モートン

アップデート

テント リソースを次のように変更しました。

class TentResource(ModelResource):
    class Meta:
        queryset = Tent.objects.all()
        resource_name = 'tents'
        allowed_methods = ['get', 'post', 'patch']
        authentication = ApiKeyAuthentication()
        authorization = Authorization()