From 7da5f0693dffc23ab768bddf6a8d733ecdb8c247 Mon Sep 17 00:00:00 2001 From: Chneemann Date: Tue, 25 Mar 2025 09:48:32 +0100 Subject: [PATCH] feat: secured user data retrieval with Django IsAuthenticated permission --- user_app/views.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/user_app/views.py b/user_app/views.py index c1a348a..a8228ef 100644 --- a/user_app/views.py +++ b/user_app/views.py @@ -3,8 +3,11 @@ from rest_framework.response import Response from .models import User from .serializers import UserSerializer from .caching import get_cached_user, cache_user +from rest_framework.permissions import IsAuthenticated class UserViewSet(viewsets.ModelViewSet): + permission_classes = [IsAuthenticated] + queryset = User.objects.all() serializer_class = UserSerializer