diff --git a/scipost_django/api/urls.py b/scipost_django/api/urls.py index fbc71bd2393c37c28cf22692aaca105cb5239716..b37662f77b8437f0736b6f4311100a36b6b05f8f 100644 --- a/scipost_django/api/urls.py +++ b/scipost_django/api/urls.py @@ -23,7 +23,10 @@ from organizations.api.viewsets import ( ) # finances -from finances.api.viewsets import SubsidyFinAdminAPIViewSet +from finances.api.viewsets import ( + SubsidyFinAdminAPIViewSet, + SubsidyPublicAPIViewSet +) # Next two: old style, to be deprecated: @@ -53,6 +56,7 @@ router.register('nap', OrganizationNAPViewSet) # finances router.register('finadmin/subsidies', SubsidyFinAdminAPIViewSet) +router.register('subsidies', SubsidyPublicAPIViewSet) # Next two: old style, to be deprecated: router.register(r'news', NewsItemViewSet) diff --git a/scipost_django/finances/api/viewsets.py b/scipost_django/finances/api/viewsets.py index ec8017be79014c4f0a01d00c70b151c86b36281f..2488eee78669d0d2f0c30da1c58e3277433e7677 100644 --- a/scipost_django/finances/api/viewsets.py +++ b/scipost_django/finances/api/viewsets.py @@ -2,7 +2,7 @@ __copyright__ = "Copyright © Stichting SciPost (SciPost Foundation)" __license__ = "AGPL v3" -from rest_framework.permissions import BasePermission +from rest_framework.permissions import AllowAny, BasePermission from rest_framework.settings import api_settings from rest_framework_csv import renderers as r @@ -40,3 +40,8 @@ class SubsidyFinAdminAPIViewSet( 'organization__name__icontains', 'organization__acronym__icontains' ] + + +class SubsidyPublicAPIViewSet(SubsidyFinAdminAPIViewSet): + queryset = Subsidy.objects.filter(amount_publicly_shown=True) + permission_classes = [AllowAny,]