go back

main/api/views.py

@@ -13,9 +13,8 @@ class ProductViewSet(mixins.ListModelMixin,
                      GenericViewSet):
     serializer_class = ProductSerializer
     queryset = Product.objects.all()
-    permission_classes = [AllowAny]
 
-    @list_route(methods=['get'], permission_classes=[AllowAny])
+    @list_route(methods=['get'])
     def group_by_user(self, request):
         products = self.get_queryset().filter(active=True)
         serializer = ProductStatSerializer(products, many=True)