.

rapids/views.py

@@ -67,7 +67,7 @@ from rapids.forms import RapidCreationDefaultForm
 from rapids.models import RapidCreationDefault
 
 
-from rest_framework import viewsets
+from rest_framework import viewsets, permissions
 
 from .serializers import ExamSerializer, QuestionAnswerSerializer, RapidSerializer
 
@@ -965,5 +965,6 @@ class QuestionAnswerViewSet(viewsets.ModelViewSet):
     serializer_class = QuestionAnswerSerializer
 
 class RapidViewSet(viewsets.ModelViewSet):
+    permission_classes = [permissions.IsAuthenticatedOrReadOnly]
     queryset = Rapid.objects.all()#.order_by('name')
     serializer_class = RapidSerializer