resend_activation action uses password_reset permission from settings

[73VW]

Hello there,

As mentionned in the title of this issue, resend_activation action uses the password_reset permission from the settings:

    def get_permissions(self):
        ...
        elif self.action == "resend_activation":
            self.permission_classes = settings.PERMISSIONS.password_reset
        ...

What is the reason of this? In my opinion, it should use its own permession or at least the activation permission.

I can open a PR in order to fix this if needed.

[tomwojcik]

On one hand both actions, resend_activation and password_reset, involve sending an email to the user to perform an action that changes the state of the user account (activating it or resetting its password). So imo it's not necessarily a bug.

On the other hand, your observation is valid. It does make sense to introduce this additional granularity, especially due to semantic reasons. All the other actions have the permissions named after them, respectively.

PR welcome.

[73VW]

Hey @tomwojcik,

Better late than never. I've implemented the change.

Best,
Maël