From f56e989ed4825e243090bca95cb0d070888b8e5e Mon Sep 17 00:00:00 2001
From: Sander Roosendaal <roosendaalsander@gmail.com>
Date: Wed, 5 Aug 2020 07:33:30 +0200
Subject: [PATCH] fixed

---
 rowers/views/apiviews.py   | 1 +
 rowers/views/statements.py | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/rowers/views/apiviews.py b/rowers/views/apiviews.py
index 428cf684..33a19dba 100644
--- a/rowers/views/apiviews.py
+++ b/rowers/views/apiviews.py
@@ -81,6 +81,7 @@ from rest_framework_swagger.renderers import OpenAPIRenderer, SwaggerUIRenderer
 @csrf_exempt
 @login_required()
 @api_view(["GET","POST"])
+@permission_classes([IsAuthenticated])
 def strokedatajson_v2(request,id):
     """
     POST: Add Stroke data to workout
diff --git a/rowers/views/statements.py b/rowers/views/statements.py
index 9061fb13..46a19e38 100644
--- a/rowers/views/statements.py
+++ b/rowers/views/statements.py
@@ -686,7 +686,8 @@ try:
 except ImportError:
     pass
 
-from rest_framework.decorators import api_view, renderer_classes
+from rest_framework.decorators import api_view, renderer_classes, permission_classes
+from rest_framework.permissions import IsAuthenticated
 
 
 from rowers.permissions import IsOwnerOrNot, IsCompetitorOrNot