Permissions changes

collabmap/urls.py

@@ -49,6 +49,7 @@ from core.views.social_auth import FacebookLogin, TwitterLogin, FacebookConnect,
 
 urlpatterns = api_patterns[0]
 urlpatterns += [
+    path('admin/', include('django.contrib.auth.urls')),
     url(r'^token-auth/', obtain_jwt_token),
     url(r'^token-refresh/', refresh_jwt_token),
     url(r'^token-verify/', verify_jwt_token),

surveys/views/api.py

@@ -146,7 +146,7 @@ class ResponseViewSet(DestroyToInvisibleMixin, OwnerFieldMixin, ModelViewSet):
 ############################################################
 class AnswerViewSet(DestroyToInvisibleMixin, ModelViewSet):
     #Everyone can read, just staff user can modificate
-    permission_classes = (AnswerPermissions,)
+    permission_classes = (IsAuthenticated,)
     queryset = Answer.objects.filter(visible=True)
     serializer_class = AnswerSerializer
     #Enable filter by code
@@ -177,7 +177,7 @@ class AnswerViewSet(DestroyToInvisibleMixin, ModelViewSet):
 ############################################################
 class SpatialInputViewSet(DestroyToInvisibleMixin, ModelViewSet):
     #Everyone can read, just staff user can modificate
-    permission_classes = (SpatialInputPermissions,)
+    permission_classes = (IsAuthenticated,)
     queryset = SpatialInput.objects.filter(visible=True)
     serializer_class = SpatialInputSerializer
     #Enable filter by code
@@ -189,7 +189,7 @@ class SpatialInputViewSet(DestroyToInvisibleMixin, ModelViewSet):
 ############################################################
 class SpatialInputAnswerViewSet(mixins.ListModelMixin, GenericViewSet):
     #Everyone can read, just staff user can modificate
-    permission_classes = (IsAdminUser,)
+    #permission_classes = (IsAdminUser,)
     queryset = Answer.objects.filter(visible=True, question__type='cm')
     serializer_class = SpatialInputAnswerSerializer
     #Enable filter