fix: backend permission

SELab-2 · Apr 16, 2024 · 50534c8 · 50534c8
1 parent 46ce291
commit 50534c8
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/backend/api/permissions/teacher_permissions.py b/backend/api/permissions/teacher_permissions.py
@@ -9,8 +9,7 @@ class TeacherPermission(IsAuthenticated):
     def has_permission(self, request, view):
         """Check if user has permission to view a general Teacher endpoint."""
         user = request.user
-
-        if view.action in ['list', 'retrieve', 'search']:
+        if view.action in ['list', 'retrieve', 'search', 'projects']:
             # Every teacher can get the list of teachers
             return user.is_authenticated and is_teacher(user)