oauth2 ustawienia + uprawnienia

jobposting/permissions.py

@@ -5,6 +5,7 @@ class ClientCredentialPermission(BasePermission):
         if request.auth is None:
             return False
         grant_type = request.auth.application.get_authorization_grant_type_display()
+        print(grant_type)
         if request.user is None and grant_type == 'Client credentials':
             return True
         else:

jobposting/views.py

@@ -17,14 +17,14 @@ from jobposting.serializers import (
 )
 
 class MyUserViewSet(viewsets.ModelViewSet):
-    permission_classes = [TokenHasReadWriteScope] # test only
+    permission_classes = [ClientCredentialPermission] # test only
     queryset = MyUser.objects.all()
     serializer_class = MyUserSerializer
     requried_scope = ['main']
     # permission_classes = [permissions.IsAuthenticated]
 
 class JobListingViewSet(viewsets.ModelViewSet):
-    permission_classes = [TokenHasReadWriteScope] # test only
+    permission_classes = [ClientCredentialPermission] # test only
     queryset = JobListing.objects.all()
     serializer_class = JobListingSerializer
     requried_scope = ['main']
@@ -50,7 +50,7 @@ class JobListingViewSet(viewsets.ModelViewSet):
             serializer.save(anonymous_user_data=anonymous_user_data)
 
 class SkillLevelsViewSet(viewsets.ModelViewSet):
-    permission_classes = [TokenHasReadWriteScope] # test only
+    permission_classes = [ClientCredentialPermission] # test only
     queryset = SkillLevels.objects.all()
     serializer_class = SkillLevelsSerializer
     requried_scope = ['main']
@@ -70,14 +70,14 @@ class SkillLevelsViewSet(viewsets.ModelViewSet):
             return super().create(request, *args, **kwargs)
 
 class CompanyLogoViewSet(viewsets.ModelViewSet):
-    permission_classes = [TokenHasReadWriteScope]
+    permission_classes = [ClientCredentialPermission]
     queryset = CompanyLogo.objects.all()
     serializer_class = CompanyLogoSerializer
     requried_scope = ['main']
 
 
 class SkillViewset(viewsets.ModelViewSet):
-    permission_classes = [TokenHasReadWriteScope]
+    permission_classes = [ClientCredentialPermission]
     queryset = Skill.objects.all()
     serializer_class = SkillSerializer
     requried_scope = ['main']