toastdriven/django-tastypie — comment on commit a4986212955ac177710ad7716e878ec23b631d21
File:  line 0
By akoumjian:

@toastdriven , so I am not sure what the expected behavior is, but when `put_detail` is called to update a resource, the `bundle` that it passes to `self.authorized_to_change` contains a generic object of the same class as the data, but not the actual obj from the database.

This prevents you from doing object-level permission checks inside of `to_change` because `bundle.obj` is an empty instance of the `_meta.object_class`.

Is this intentional, or should the user be able to do permission checks against bundle.obj?