Merge pull request #1 from tdruez/master

Fixed Permissions.get_required_object_permissions for #4927

Author: tdruez

rest_framework/permissions.py

@@ -5,6 +5,7 @@
 
 from django.http import Http404
 
+from rest_framework import exceptions
 from rest_framework.compat import is_authenticated
 
 
@@ -108,6 +109,10 @@ def get_required_permissions(self, method, model_cls):
             'app_label': model_cls._meta.app_label,
             'model_name': model_cls._meta.model_name
         }
+
+        if method not in self.perms_map:
+            raise exceptions.MethodNotAllowed(method)
+
         return [perm % kwargs for perm in self.perms_map[method]]
 
     def has_permission(self, request, view):
@@ -169,6 +174,10 @@ def get_required_object_permissions(self, method, model_cls):
             'app_label': model_cls._meta.app_label,
             'model_name': model_cls._meta.model_name
         }
+
+        if method not in self.perms_map:
+            raise exceptions.MethodNotAllowed(method)
+
         return [perm % kwargs for perm in self.perms_map[method]]
 
     def has_object_permission(self, request, view, obj):