From dd115197f4ec69c8f51df06f006e4126be107622 Mon Sep 17 00:00:00 2001 From: keannu125 Date: Tue, 7 Mar 2023 20:39:33 +0800 Subject: [PATCH] Only allow get method in user list endpoint --- ivy/products/views.py | 1 + 1 file changed, 1 insertion(+) diff --git a/ivy/products/views.py b/ivy/products/views.py index 9e5c774..d10bf64 100644 --- a/ivy/products/views.py +++ b/ivy/products/views.py @@ -13,6 +13,7 @@ class ProductViewSet(viewsets.ModelViewSet): class UserListViewSet(viewsets.ModelViewSet): # permission_classes = [IsAuthenticated] + http_method_names = ['get'] serializer_class = UserSerializer queryset = User.objects.all()