Attribute "permission_classes=[AllowAny]" does not work for action decorator

[gruberrro]

I have following action:

    @action(detail=False, methods=["get"], permission_classes=[AllowAny])
    def username(self, request, *args, **kwargs):

It seems like it doesn't work and don't make this endpoint public...

I had to do in the viewset:

    def get_permissions(self):
        if self.action in ["username", "another_action"]:
            return [
                AllowAny(),
            ]
        return super().get_permissions()