diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 3cdf3638..9e619bdc 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -142,6 +142,7 @@ Removed - ``user_email_additional`` app setting (#874) - ``get_visible_projects()`` template tag (#1432) - App setting value max length limit (#1443) + - Redundant project permission in ``UserSettingRetrieveAPIView`` (#1449) v0.13.4 (2024-02-16) diff --git a/projectroles/views_api.py b/projectroles/views_api.py index 075c79c1..4130e700 100644 --- a/projectroles/views_api.py +++ b/projectroles/views_api.py @@ -1237,8 +1237,6 @@ class UserSettingRetrieveAPIView( - ``setting_name``: Setting name (string) """ - # NOTE: Update project settings perm is checked manually - permission_required = 'projectroles.view_project' schema = AutoSchema(operation_id_base='AppSettingUser') serializer_class = AppSettingSerializer