diff --git a/src/news/permissions.py b/src/news/permissions.py index c8405be19c5b2c7c4df0397461142b4cdf852bf6..8eca896872bb01b9a786a2d128b4feaa64e0a714 100644 --- a/src/news/permissions.py +++ b/src/news/permissions.py @@ -2,6 +2,6 @@ from rest_framework.permissions import BasePermission from rest_framework.permissions import SAFE_METHODS -class IsStaffOrReadOnlyForAuthenticated(BasePermission): +class IsStaffOrReadOnly(BasePermission): def has_permission(self, request, view): - return request.user.is_staff or request.method in SAFE_METHODS and request.user.is_authenticated + return request.user.is_staff or request.method in SAFE_METHODS diff --git a/src/news/views.py b/src/news/views.py index 7ddf4881487ae34e32428022d7887665c88cf685..0264eddbaabcd57ab898134d039a30ac9911f75c 100644 --- a/src/news/views.py +++ b/src/news/views.py @@ -1,4 +1,4 @@ -from news.permissions import IsStaffOrReadOnlyForAuthenticated +from news.permissions import IsStaffOrReadOnly from rest_framework import viewsets from news.models import Article from news.serializers import ArticleListSerializer @@ -6,5 +6,5 @@ from news.serializers import ArticleListSerializer class NewsViewSet(viewsets.ModelViewSet): serializer_class = ArticleListSerializer - permission_classes = [IsStaffOrReadOnlyForAuthenticated] + permission_classes = [IsStaffOrReadOnly] queryset = Article.objects.all()