diff --git a/DjangoFiles/ApiBillet/views.py b/DjangoFiles/ApiBillet/views.py index f486f79..a5daf50 100644 --- a/DjangoFiles/ApiBillet/views.py +++ b/DjangoFiles/ApiBillet/views.py @@ -139,10 +139,15 @@ class ReservationViewset(viewsets.ViewSet): return Response(validator.errors, status=status.HTTP_400_BAD_REQUEST) def get_permissions(self): - permission_classes = [TenantAdminPermission] + if self.action in ['list']: + permission_classes = [TenantAdminPermission] + else: + permission_classes = [permissions.AllowAny] return [permission() for permission in permission_classes] + + class MembershipViewset(viewsets.ViewSet): permission_classes = [AllowAny]