From fdd9b7c77b6cf4940b20d5508d5ab53405f3f6f6 Mon Sep 17 00:00:00 2001 From: Oliver Date: Wed, 31 Jul 2024 15:49:30 +1000 Subject: [PATCH] Fix permissions for importing data (#7776) --- src/backend/InvenTree/importer/api.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/backend/InvenTree/importer/api.py b/src/backend/InvenTree/importer/api.py index b039c61063..6eb4815784 100644 --- a/src/backend/InvenTree/importer/api.py +++ b/src/backend/InvenTree/importer/api.py @@ -47,6 +47,8 @@ class DataImporterModelList(APIView): class DataImportSessionList(BulkDeleteMixin, ListCreateAPI): """API endpoint for accessing a list of DataImportSession objects.""" + permission_classes = [permissions.IsAuthenticated] + queryset = importer.models.DataImportSession.objects.all() serializer_class = importer.serializers.DataImportSessionSerializer