diff --git a/api/views.py b/api/views.py index ea9f611..2e14092 100644 --- a/api/views.py +++ b/api/views.py @@ -33,7 +33,7 @@ class UserViewSet(viewsets.ModelViewSet): class ClubViewSet(viewsets.ModelViewSet): queryset = Club.objects.all() serializer_class = ClubSerializer - permission_classes = [IsClubOwner] # Clubs are public whereas the other requests are only for logged users + permission_classes = [IsAuthenticated, IsClubOwner] # Clubs are public whereas the other requests are only for logged users def perform_create(self, serializer): serializer.save(creator=self.request.user)