🛂 allow creating/updating via api also with regular authentication, n…

…ot just tokens otherwise, we'd have to generate a token for our frontend
okfde · Nov 8, 2024 · 3f093af · 3f093af
1 parent be6021a
commit 3f093af
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/froide/foirequest/auth.py b/froide/foirequest/auth.py
@@ -366,6 +366,6 @@ class CreateOnlyWithScopePermission(TokenHasScope):
     def has_permission(self, request, view):
         if view.action not in ("create", "update"):
             return True
-        if not request.user.is_authenticated:
-            return False
+        if request.user.is_authenticated:
+            return True
         return super().has_permission(request, view)