addwin/promotions
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

access without scope

Browse source
This commit is contained in:
Sayyid Hamid Mahdavi 2026-02-22 16:24:49 +03:30
parent 4830602d50
commit 2de2f5adc3
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
apps/promotions/views.py
View file

@ -106,9 +106,13 @@ class UserPlanViewSet(mixins.RetrieveModelMixin,
GenericViewSet):
serializer_class = UserPlanSerializer
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
# required_alternate_scopes = {
# "GET": [["promotions.user.plans:list-retrieve"]],
# "POST": [["promotions.user.plans:list-retrieve"]],
# }
required_alternate_scopes = {
"GET": [["promotions.user.plans:list-retrieve"]],
"POST": [["promotions.user.plans:list-retrieve"]],
"GET": [[]],
"POST": [[]],
}
def get_queryset(self):