fixed

rowers/views/apiviews.py

@@ -81,6 +81,7 @@ from rest_framework_swagger.renderers import OpenAPIRenderer, SwaggerUIRenderer
 @csrf_exempt
 @login_required()
 @api_view(["GET","POST"])
+@permission_classes([IsAuthenticated])
 def strokedatajson_v2(request,id):
     """
     POST: Add Stroke data to workout

rowers/views/statements.py

@@ -686,7 +686,8 @@ try:
 except ImportError:
     pass
 
-from rest_framework.decorators import api_view, renderer_classes
+from rest_framework.decorators import api_view, renderer_classes, permission_classes
+from rest_framework.permissions import IsAuthenticated
 
 
 from rowers.permissions import IsOwnerOrNot, IsCompetitorOrNot