oauth2 ustawienia + uprawnienia

jobposting/views.py

@@ -3,7 +3,7 @@ from rest_framework.response import Response
 from jobposting.models import JobListing, SkillLevels, CompanyLogo, Skill
 from core.models import MyUser, AnonymousUserData
 from rest_framework import status
-
+from izaac.permissions import ClientCredentialPermission
 from oauth2_provider.contrib.rest_framework import TokenHasReadWriteScope
 
 
@@ -17,13 +17,13 @@ from jobposting.serializers import (
 )
 
 class MyUserViewSet(viewsets.ModelViewSet):
-    permission_classes = [permissions.IsAuthenticated, TokenHasReadWriteScope] # test only
+    permission_classes = [ClientCredentialPermission] # test only
     queryset = MyUser.objects.all()
     serializer_class = MyUserSerializer
     # permission_classes = [permissions.IsAuthenticated]
 
 class JobListingViewSet(viewsets.ModelViewSet):
-    permission_classes = [permissions.IsAuthenticated, TokenHasReadWriteScope]# test only
+    permission_classes = [ClientCredentialPermission] # test only
     queryset = JobListing.objects.all()
     serializer_class = JobListingSerializer
     # permission_classes = [permissions.IsAuthenticatedOrReadOnly]
@@ -47,7 +47,7 @@ class JobListingViewSet(viewsets.ModelViewSet):
             serializer.save(anonymous_user_data=anonymous_user_data)
 
 class SkillLevelsViewSet(viewsets.ModelViewSet):
-    permission_classes = [permissions.IsAuthenticated, TokenHasReadWriteScope] # test only
+    permission_classes = [ClientCredentialPermission] # test only
     queryset = SkillLevels.objects.all()
     serializer_class = SkillLevelsSerializer
     # permission_classes = [permissions.IsAuthenticatedOrReadOnly]
@@ -65,11 +65,11 @@ class SkillLevelsViewSet(viewsets.ModelViewSet):
             return super().create(request, *args, **kwargs)
 
 class CompanyLogoViewSet(viewsets.ModelViewSet):
-    permission_classes = [permissions.IsAuthenticated, TokenHasReadWriteScope]
+    permission_classes = [ClientCredentialPermission]
     queryset = CompanyLogo.objects.all()
     serializer_class = CompanyLogoSerializer
 
 class SkillViewset(viewsets.ModelViewSet):
-    permission_classes = [permissions.IsAuthenticated, TokenHasReadWriteScope]
+    permission_classes = [ClientCredentialPermission]
     queryset = Skill.objects.all()
     serializer_class = SkillSerializer