From b154ffb79e9d8fc6e9a5288b8dff65f7de34ab36 Mon Sep 17 00:00:00 2001
From: Aarni Halinen <aarni.halinen@aalto.fi>
Date: Tue, 21 Aug 2018 19:27:18 +0300
Subject: [PATCH] Add normal permissions to DRF root

---
 webapp/urls.py  | 9 +++++++--
 webapp/views.py | 5 ++++-
 2 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/webapp/urls.py b/webapp/urls.py
index ca733aa..2ee139e 100644
--- a/webapp/urls.py
+++ b/webapp/urls.py
@@ -19,9 +19,14 @@ from webapp.views import about_view
 # from webapp.views import contact_view
 
 from webapp.views import EventViewSet, SignupFormViewSet, SignupViewSet,\
-    FeedViewSet, ContactsViewSet, SavedQuestionsViewSet
+    FeedViewSet, ContactsViewSet, SavedQuestionsViewSet, RootView
 
-router = routers.DefaultRouter()
+
+class APIRouter(routers.DefaultRouter):
+    APIRootView = RootView
+
+
+router = APIRouter()
 router.register(r'events', EventViewSet)
 router.register(r'signupForm', SignupFormViewSet)
 router.register(r'signup', SignupViewSet)
diff --git a/webapp/views.py b/webapp/views.py
index e0e561d..5782b1c 100644
--- a/webapp/views.py
+++ b/webapp/views.py
@@ -9,7 +9,7 @@ from django.views.decorators.http import require_http_methods
 # from django.contrib.auth.decorators import permission_required, login_required
 # from django.conf import settings
 # from django.utils import timezone
-from rest_framework import viewsets
+from rest_framework import viewsets, routers
 from rest_framework.permissions import IsAuthenticatedOrReadOnly
 from rest_framework.response import Response
 from rest_framework.reverse import reverse
@@ -23,7 +23,10 @@ from webapp.models import Event, SignupForm, Signup, TemplateQuestion, Feed,\
 from webapp.serializers import *
 from members.views.utils import *
 
+
 # -- REST API -- #
+class RootView(routers.APIRootView):
+    permission_classes = [IsAuthenticatedOrReadOnly]
 
 
 class EventViewSet(viewsets.ModelViewSet):