From 2265dc5e16962b0aa87b4dcf4b438355758a0f84 Mon Sep 17 00:00:00 2001
From: shamoon <4887959+shamoon@users.noreply.github.com>
Date: Tue, 11 Jun 2024 00:29:50 -0700
Subject: [PATCH] Fix: respect model permissions for tasks API endpoint

---
 src/documents/views.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/documents/views.py b/src/documents/views.py
index c0ad3c67a..584a994cf 100644
--- a/src/documents/views.py
+++ b/src/documents/views.py
@@ -1654,7 +1654,7 @@ class RemoteVersionView(GenericAPIView):
 
 
 class TasksViewSet(ReadOnlyModelViewSet):
-    permission_classes = (IsAuthenticated,)
+    permission_classes = (IsAuthenticated, PaperlessObjectPermissions)
     serializer_class = TasksViewSerializer
 
     def get_queryset(self):