Fixed Users API Permission Levels

ohcnetwork · Jul 24, 2020 · d0520db · d0520db
1 parent a77db38
commit d0520db
Showing 1 changed file with 19 additions and 14 deletions.
diff --git a/care/users/api/viewsets/users.py b/care/users/api/viewsets/users.py
@@ -21,20 +21,25 @@ class UserViewSet(
     queryset = User.objects.all().select_related("local_body", "district", "state")
     lookup_field = "username"
 
-    def get_permissions(self):
-        return [
-            DRYPermissions(),
-            IsAuthenticated(),
-        ]
-        # if self.request.method == "POST":
-        #     return [
-        #         DRYPermissions(),
-        #     ]
-        # else:
-        #     return [
-        #         IsAuthenticated(),
-        #         DRYPermissions(),
-        #     ]
+    permission_classes = (
+        IsAuthenticated,
+        DRYPermissions,
+    )
+
+    # def get_permissions(self):
+    #     return [
+    #         DRYPermissions(),
+    #         IsAuthenticated(),
+    #     ]
+    # if self.request.method == "POST":
+    #     return [
+    #         DRYPermissions(),
+    #     ]
+    # else:
+    #     return [
+    #         IsAuthenticated(),
+    #         DRYPermissions(),
+    #     ]
 
     def get_serializer_class(self):
         if self.action == "list" and not self.request.user.is_superuser: