before change Ticket Desc to TextArea

apps/shop/views/order.py

@@ -124,7 +124,7 @@ class OrderUpdateApi(APIView):
 
 
 class OrderDeleteApi(APIView):
-
+    permission_classes = (IsAuthenticated,)
     def delete(self, request, order_id: int):
 
         user_workspace_uuid = get_user_workspace_uuid(request=request)
@@ -139,7 +139,7 @@ class OrderDeleteApi(APIView):
 
 
 class OrderListApi(generics.ListAPIView):
-
+    permission_classes = (IsAuthenticated,)
     class OutputSerializer(serializers.ModelSerializer):
         class Meta:
             model = OrderModel
@@ -155,6 +155,7 @@ class OrderListApi(generics.ListAPIView):
 
 
 class OrderListOperatorApi(generics.ListAPIView):
+    permission_classes = (IsAuthenticated,)
     class OutputSerializer(serializers.ModelSerializer):
         customer = inline_serializer(fields={
             'id': serializers.IntegerField(),
@@ -172,6 +173,7 @@ class OrderListOperatorApi(generics.ListAPIView):
 
 
 class OrderRetrieveOperatorApi(APIView):
+    permission_classes = (IsAuthenticated,)
     class OutputSerializer(serializers.ModelSerializer):
 
         customer = inline_serializer(fields={
@@ -210,6 +212,7 @@ class OrderRetrieveOperatorApi(APIView):
 
 
 class OrderRetrieveOperatorExcelApi(APIView):
+    permission_classes = (IsAuthenticated, )
     def get(self, request, order_id):
 
         order_df = retrieve_order_item_excel(request=request, order_id=order_id)