diff --git a/docmanager_backend/accounts/permissions.py b/docmanager_backend/accounts/permissions.py index babbfd4..6a934f8 100644 --- a/docmanager_backend/accounts/permissions.py +++ b/docmanager_backend/accounts/permissions.py @@ -19,7 +19,7 @@ class IsPlanning(BasePermission): """ def has_permission(self, request, view): - return bool(request.user and request.user.role in ("planning", "admin", "head", "staff")) + return bool(request.user and request.user.role in ("planning", "admin")) class IsHead(BasePermission): diff --git a/docmanager_backend/questionnaires/views.py b/docmanager_backend/questionnaires/views.py index aac0942..9562be4 100644 --- a/docmanager_backend/questionnaires/views.py +++ b/docmanager_backend/questionnaires/views.py @@ -15,14 +15,7 @@ class QuestionnaireListAPIView(generics.ListAPIView): serializer_class = QuestionnaireSerializer queryset = Questionnaire.objects.all() pagination_class = PageNumberPagination - permission_classes = [IsAuthenticated] - - def get_queryset(self): - user = self.request.user - if user.role == "client": - return Questionnaire.objects.filter(client=user) - else: - return Questionnaire.objects.all() + permission_classes = [IsAuthenticated, IsPlanning] class QuestionnaireSubmitView(generics.CreateAPIView):