diff --git a/api/v1/views.py b/api/v1/views.py index d8129ebe..a01f9d6d 100644 --- a/api/v1/views.py +++ b/api/v1/views.py @@ -3,7 +3,7 @@ from datetime import datetime from django.contrib.auth import get_user_model from rest_framework import status, views, viewsets, generics -from rest_framework.decorators import detail_route, list_route, action +from rest_framework.decorators import detail_route, list_route, action, permission_classes, authentication_classes from rest_framework.response import Response from . import ExtendedModelViewSet @@ -453,7 +453,6 @@ class CommentViewSet(ExtendedModelViewSet): class ObjectCommentsViewSet(ExtendedModelViewSet): queryset = Comment.objects.all() serializer_class = CommentCreateSerializer - permission_classes = (IsAuthorObjectOrAdmin,) ordering_fields = ('update_at', ) def get_queryset(self): @@ -497,6 +496,7 @@ class ObjectCommentsViewSet(ExtendedModelViewSet): except Exception as e: print(e) + @permission_classes((IsAuthorObjectOrAdmin,)) def perform_destroy(self, instance): obj_type = None obj_id = None @@ -516,6 +516,7 @@ class ObjectCommentsViewSet(ExtendedModelViewSet): print(e) instance.delete() + @authentication_classes([]) def list(self, request, *args, **kwargs): queryset = self.filter_queryset(self.get_queryset()).filter(parent__isnull=True) serializer = self.get_serializer(queryset, many=True) diff --git a/apps/content/templates/content/blocks/video.html b/apps/content/templates/content/blocks/video.html index 791920b1..8c707388 100644 --- a/apps/content/templates/content/blocks/video.html +++ b/apps/content/templates/content/blocks/video.html @@ -15,29 +15,3 @@ - - diff --git a/apps/course/templates/course/course.html b/apps/course/templates/course/course.html index c3a35c4f..e031fe23 100644 --- a/apps/course/templates/course/course.html +++ b/apps/course/templates/course/course.html @@ -70,7 +70,7 @@