.

anatomy/views.py

@@ -66,7 +66,7 @@ from django.template.defaulttags import register
 
 from generic.mixins import SuperuserRequiredMixin
 
-from rest_framework import viewsets
+from rest_framework import viewsets, permissions
 
 from .serializers import ExamSerializer
 
@@ -998,6 +998,7 @@ class ExamUpdate(LoginRequiredMixin, AuthorOrCheckerRequiredMixin, UpdateView):
 class ExamViewSet(viewsets.ModelViewSet):
     #queryset = Exam.objects.all().order_by('name')
     serializer_class = ExamSerializer
+    permission_classes = [permissions.IsAuthenticated]
 
     def get_queryset(self):
         """