Fix bug where non-instructors couldn't email iCal

2 years ago · edcc8d2ce0
parent 0911c9a7e5
commit edcc8d2ce0
1 changed files with 1 additions and 1 deletions
--- a/apiserver/apiserver/api/views.py
+++ b/apiserver/apiserver/api/views.py
@ -334,7 +334,7 @@ class SessionViewSet(Base, List, Retrieve, Create, Update):

        return response

-    @action(detail=True, methods=['post'])
+    @action(detail=True, methods=['post'], permission_classes=[IsAuthenticated])
    def email_ical(self, request, pk=None):
        session = get_object_or_404(models.Session, id=pk)
        user = self.request.user