From 87da2e309ad6059bbaa43652bc92bd35007d32fc Mon Sep 17 00:00:00 2001
From: Hironsan <light.tree.1.13@gmail.com>
Date: Fri, 7 May 2021 13:21:59 +0900
Subject: [PATCH] Add permission to TagList

---
 backend/api/views/tag.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/backend/api/views/tag.py b/backend/api/views/tag.py
index eb86da4e..231d4473 100644
--- a/backend/api/views/tag.py
+++ b/backend/api/views/tag.py
@@ -1,14 +1,17 @@
 from django.shortcuts import get_object_or_404
 from rest_framework import generics, status
+from rest_framework.permissions import IsAuthenticated
 from rest_framework.response import Response
 
 from ..models import Project, Tag
+from ..permissions import IsInProjectReadOnlyOrAdmin
 from ..serializers import TagSerializer
 
 
 class TagList(generics.ListCreateAPIView):
     serializer_class = TagSerializer
     pagination_class = None
+    permission_classes = [IsAuthenticated & IsInProjectReadOnlyOrAdmin]
 
     def get_queryset(self):
         project = get_object_or_404(Project, pk=self.kwargs['project_id'])