Changed api permissions to be authenticated instead of admin. Only in…

…ternal authenticated users can access downtimedb anyway since it is not externally accessible on the web
observatorycontrolsystem · Jul 26, 2024 · b6df5f4 · b6df5f4
1 parent d75a5c6
commit b6df5f4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/downtime/settings.py b/downtime/settings.py
@@ -122,7 +122,7 @@
         'ocs_authentication.backends.OCSTokenAuthentication',  # Allows authentication against Oauth Servers api_token
         'rest_framework.authentication.SessionAuthentication',
     ),
-    'DEFAULT_PERMISSION_CLASSES': ('ocs_authentication.permissions.IsAdminOrReadOnly',),
+    'DEFAULT_PERMISSION_CLASSES': ('rest_framework.permissions.IsAuthenticatedOrReadOnly',),
     'DEFAULT_FILTER_BACKENDS': ('django_filters.rest_framework.DjangoFilterBackend',),
     'DEFAULT_VERSIONING_CLASS': 'rest_framework.versioning.NamespaceVersioning',
     'DEFAULT_PAGINATION_CLASS': 'rest_framework.pagination.LimitOffsetPagination',