From 2de2f5adc385cc7aa6f59b6d60fe6d8235c12f15 Mon Sep 17 00:00:00 2001 From: Sayyid Hamid Mahdavi Date: Sun, 22 Feb 2026 16:24:49 +0330 Subject: [PATCH] access without scope --- apps/promotions/views.py | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/apps/promotions/views.py b/apps/promotions/views.py index 3e4428e..954e831 100644 --- a/apps/promotions/views.py +++ b/apps/promotions/views.py @@ -106,9 +106,13 @@ class UserPlanViewSet(mixins.RetrieveModelMixin, GenericViewSet): serializer_class = UserPlanSerializer permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements] + # required_alternate_scopes = { + # "GET": [["promotions.user.plans:list-retrieve"]], + # "POST": [["promotions.user.plans:list-retrieve"]], + # } required_alternate_scopes = { - "GET": [["promotions.user.plans:list-retrieve"]], - "POST": [["promotions.user.plans:list-retrieve"]], + "GET": [[]], + "POST": [[]], } def get_queryset(self):