API: Fix insufficient permission check

This commit is contained in:
Raphael Michel
2018-04-26 09:11:33 +02:00
parent 209646e012
commit d8e5c9f033

View File

@@ -178,6 +178,7 @@ class CheckinListPositionViewSet(viewsets.ReadOnlyModelViewSet):
filter_class = CheckinOrderPositionFilter
permission = 'can_view_orders'
write_permission = 'can_change_orders'
@cached_property
def checkinlist(self):