From f225f72145e3130b829dc1c792353a1a559b2567 Mon Sep 17 00:00:00 2001
From: shamoon <4887959+shamoon@users.noreply.github.com>
Date: Tue, 11 Jun 2024 00:51:18 -0700
Subject: [PATCH] Fix: respect model permissions for tasks API endpoint (#6958)
---
src/documents/views.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/documents/views.py b/src/documents/views.py
index c0ad3c67a..584a994cf 100644
--- a/src/documents/views.py
+++ b/src/documents/views.py
@@ -1654,7 +1654,7 @@ class RemoteVersionView(GenericAPIView):
class TasksViewSet(ReadOnlyModelViewSet):
- permission_classes = (IsAuthenticated,)
+ permission_classes = (IsAuthenticated, PaperlessObjectPermissions)
serializer_class = TasksViewSerializer
def get_queryset(self):