From b1640e5592b23a33bd02b866c4f22306bd62a753 Mon Sep 17 00:00:00 2001
From: ibuler <ibuler@qq.com>
Date: Fri, 5 Jun 2020 14:43:40 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BF=AE=E6=94=B9common=20resource=20ap?=
 =?UTF-8?q?i=E7=9A=84=E6=9D=83=E9=99=90=EF=BC=8C=E5=90=A6=E5=88=99auditor?=
 =?UTF-8?q?=E6=97=A0=E6=B3=95=E4=BD=BF=E7=94=A8?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 apps/common/api.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/apps/common/api.py b/apps/common/api.py
index ab762277a..06c162539 100644
--- a/apps/common/api.py
+++ b/apps/common/api.py
@@ -11,6 +11,7 @@ from rest_framework.response import Response
 from rest_framework import generics, serializers
 from rest_framework.viewsets import GenericViewSet
 
+from common.permissions import IsValidUser
 from .http import HttpResponseTemporaryRedirect
 from .const import KEY_CACHE_RESOURCES_ID
 from .utils import get_logger
@@ -30,7 +31,7 @@ class OutputSerializer(serializers.Serializer):
 
 
 class LogTailApi(generics.RetrieveAPIView):
-    permission_classes = ()
+    permission_classes = (IsValidUser,)
     buff_size = 1024 * 10
     serializer_class = OutputSerializer
     end = False
@@ -86,6 +87,7 @@ class LogTailApi(generics.RetrieveAPIView):
 
 
 class ResourcesIDCacheApi(APIView):
+    permission_classes = (IsValidUser,)
 
     def post(self, request, *args, **kwargs):
         spm = str(uuid.uuid4())