11

fabilya · Oct 1, 2023 · 6dd7e9c · 6dd7e9c
1 parent ea99fe9
commit 6dd7e9c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/backend/api/views.py b/backend/api/views.py
@@ -50,6 +50,7 @@ class RecipeViewSet(
     queryset = Recipe.objects.all()
     filter_backends = (DjangoFilterBackend,)
     filterset_class = RecipeFilter
+    permission_classes = OwnerUserOrReadOnly
 
     def get_permissions(self):
 
@@ -60,7 +61,7 @@ def get_permissions(self):
             'shopping_cart': [permissions.IsAuthenticated()],
             'download_shopping_cart': [permissions.IsAuthenticated()],
             'list': [permissions.AllowAny()],
-            'retrieve': [permissions.AllowAny()],
+            'retrieve': [OwnerUserOrReadOnly],
         }
         return permissions_dict.get(
             self.action, [permissions.IsAuthenticated()]