From 79449b7c789ba34f8508cbdb844fdcfcd8ddcb52 Mon Sep 17 00:00:00 2001 From: Christian Gill Date: Tue, 12 May 2020 16:27:46 +0200 Subject: [PATCH] change of permission for annotation edits --- app/api/views.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/api/views.py b/app/api/views.py index afa030f4..ee94f879 100644 --- a/app/api/views.py +++ b/app/api/views.py @@ -212,7 +212,7 @@ class AnnotationList(generics.ListCreateAPIView): class AnnotationDetail(generics.RetrieveUpdateDestroyAPIView): lookup_url_kwarg = 'annotation_id' - permission_classes = [IsAuthenticated & (((IsAnnotator | IsAnnotationApprover) & IsOwnAnnotation) | IsProjectAdmin)] + permission_classes = [IsAuthenticated & (((IsAnnotator & IsOwnAnnotation) | IsAnnotationApprover) | IsProjectAdmin)] swagger_schema = None def get_serializer_class(self):