diff --git a/store/views.py b/store/views.py index cafb7b6..6f80322 100644 --- a/store/views.py +++ b/store/views.py @@ -76,6 +76,7 @@ class ChecklistAPI(mixins.ListModelMixin, mixins.CreateModelMixin, mixins.Retrie if self.request.user.is_authenticated: return ChecklistSerializer + # Anonymous users can edit only a certain set of fields return AnonymousUserChecklistSerializer def get_permissions(self): @@ -107,6 +108,11 @@ class ChecklistAPI(mixins.ListModelMixin, mixins.CreateModelMixin, mixins.Retrie def get(self, request, *args, **kwargs): if 'id' in kwargs: return self.retrieve(request, *args, **kwargs) + + if not request.user.is_authenticated: + # Anonymous users can't list checklists + return Response([]) + return self.list(request, *args, **kwargs) def patch(self, request, *args, **kwargs):