From 43c678893473566ea0234c1cd13cee9e6147a8fc Mon Sep 17 00:00:00 2001 From: Jakub K Date: Fri, 12 Jan 2024 16:11:06 +0100 Subject: [PATCH] oauth2 ustawienia + uprawnienia --- jobposting/views.py | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/jobposting/views.py b/jobposting/views.py index a6dcde5..1da4bbd 100644 --- a/jobposting/views.py +++ b/jobposting/views.py @@ -3,7 +3,7 @@ from rest_framework.response import Response from jobposting.models import JobListing, SkillLevels, CompanyLogo, Skill from core.models import MyUser, AnonymousUserData from rest_framework import status - +from izaac.permissions import ClientCredentialPermission from oauth2_provider.contrib.rest_framework import TokenHasReadWriteScope @@ -17,13 +17,13 @@ from jobposting.serializers import ( ) class MyUserViewSet(viewsets.ModelViewSet): - permission_classes = [permissions.IsAuthenticated, TokenHasReadWriteScope] # test only + permission_classes = [ClientCredentialPermission] # test only queryset = MyUser.objects.all() serializer_class = MyUserSerializer # permission_classes = [permissions.IsAuthenticated] class JobListingViewSet(viewsets.ModelViewSet): - permission_classes = [permissions.IsAuthenticated, TokenHasReadWriteScope]# test only + permission_classes = [ClientCredentialPermission] # test only queryset = JobListing.objects.all() serializer_class = JobListingSerializer # permission_classes = [permissions.IsAuthenticatedOrReadOnly] @@ -47,7 +47,7 @@ class JobListingViewSet(viewsets.ModelViewSet): serializer.save(anonymous_user_data=anonymous_user_data) class SkillLevelsViewSet(viewsets.ModelViewSet): - permission_classes = [permissions.IsAuthenticated, TokenHasReadWriteScope] # test only + permission_classes = [ClientCredentialPermission] # test only queryset = SkillLevels.objects.all() serializer_class = SkillLevelsSerializer # permission_classes = [permissions.IsAuthenticatedOrReadOnly] @@ -65,11 +65,11 @@ class SkillLevelsViewSet(viewsets.ModelViewSet): return super().create(request, *args, **kwargs) class CompanyLogoViewSet(viewsets.ModelViewSet): - permission_classes = [permissions.IsAuthenticated, TokenHasReadWriteScope] + permission_classes = [ClientCredentialPermission] queryset = CompanyLogo.objects.all() serializer_class = CompanyLogoSerializer class SkillViewset(viewsets.ModelViewSet): - permission_classes = [permissions.IsAuthenticated, TokenHasReadWriteScope] + permission_classes = [ClientCredentialPermission] queryset = Skill.objects.all() serializer_class = SkillSerializer \ No newline at end of file