diff --git a/jobposting/views.py b/jobposting/views.py index d6c7974..7c16a18 100644 --- a/jobposting/views.py +++ b/jobposting/views.py @@ -4,7 +4,7 @@ from jobposting.models import JobListing, SkillLevels, CompanyLogo, Skill from core.models import MyUser, AnonymousUserData from rest_framework import status from jobposting.permissions import ClientCredentialPermission -from oauth2_provider.contrib.rest_framework import TokenHasReadWriteScope +from oauth2_provider.contrib.rest_framework import TokenHasReadWriteScope, OAuth2Authentication @@ -17,14 +17,16 @@ from jobposting.serializers import ( ) class MyUserViewSet(viewsets.ModelViewSet): - permission_classes = [ClientCredentialPermission] # test only + authentication_classes = [OAuth2Authentication] + permission_classes = [TokenHasReadWriteScope] # test only queryset = MyUser.objects.all() serializer_class = MyUserSerializer required_scope = ['main'] # permission_classes = [permissions.IsAuthenticated] class JobListingViewSet(viewsets.ModelViewSet): - permission_classes = [ClientCredentialPermission] # test only + authentication_classes = [OAuth2Authentication] + permission_classes = [TokenHasReadWriteScope] # test only queryset = JobListing.objects.all() serializer_class = JobListingSerializer required_scope = ['main'] @@ -50,7 +52,8 @@ class JobListingViewSet(viewsets.ModelViewSet): serializer.save(anonymous_user_data=anonymous_user_data) class SkillLevelsViewSet(viewsets.ModelViewSet): - permission_classes = [ClientCredentialPermission] # test only + authentication_classes = [OAuth2Authentication] + permission_classes = [TokenHasReadWriteScope] # test only queryset = SkillLevels.objects.all() serializer_class = SkillLevelsSerializer required_scope = ['main'] @@ -70,14 +73,16 @@ class SkillLevelsViewSet(viewsets.ModelViewSet): return super().create(request, *args, **kwargs) class CompanyLogoViewSet(viewsets.ModelViewSet): - permission_classes = [ClientCredentialPermission] + authentication_classes = [OAuth2Authentication] + permission_classes = [TokenHasReadWriteScope] queryset = CompanyLogo.objects.all() serializer_class = CompanyLogoSerializer required_scope = ['main'] class SkillViewset(viewsets.ModelViewSet): - permission_classes = [ClientCredentialPermission] + authentication_classes = [OAuth2Authentication] + permission_classes = [TokenHasReadWriteScope] queryset = Skill.objects.all() serializer_class = SkillSerializer required_scope = ['main']