Fix unauthorized user error in get_xls

djunicode · Mar 27, 2020 · c5da41a · c5da41a
1 parent 245e1a7
commit c5da41a
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/placementApp/permissions.py b/placementApp/permissions.py
@@ -33,7 +33,9 @@ class IsStaff(BasePermission):
     message = "You do not have the permission to perform this action."
 
     def has_permission(self, request, view):
-        return request.user.is_co() or request.user.is_tpo()
+        return request.user.is_authenticated and (
+            request.user.is_co() or request.user.is_tpo()
+        )
 
     def has_object_permission(self, request, view, obj):
         return True