@tomchristie — This is almost working.

I have one issue with the IsOwnerOrReadOnly permission, which isn't immediately obvious to me: requesting the /snippets/ endpoint is resulting in a 500...

 AttributeError: 'Page' object has no attribute 'owner'

i.e. the permission class is not returning before the individual object check. In snippets/permissions.py I've assigned method = request.method which is 'POST' in the debugger. This doesn't make sense to me yet. If something occurs to you do say, otherwise I'll step through it more carefully later on.

Beyond that I just need to go over and remove any bits of old cruft. If anything jumps out to you let me know.

AttributeError: 'Page' object has no attribute 'owner'

Updating to 3.0.1 will resovle this.

(see encode/django-rest-framework#2205)

Ah, that does fix it. :)

(Still not sure why request.method was reporting 'POST' there but that can wait for another day.)

Just pending your comments, if you have any.

Coupla minor things, otherwise ready to go.

Updated

Wonderful! :)