From 01d34ec4d7a356d80819b3cc1394beddedeb5f2b Mon Sep 17 00:00:00 2001
From: Bavisetti Narayan <72156168+NarayanBavisetti@users.noreply.github.com>
Date: Fri, 3 Jan 2025 14:09:47 +0530
Subject: [PATCH] [WEB-3034] fix: sticky delete operation (#2096)

* fix: delete operation in sticky

* chore: permission change in update
---
 apiserver/plane/ee/views/app/workspace/sticky.py | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/apiserver/plane/ee/views/app/workspace/sticky.py b/apiserver/plane/ee/views/app/workspace/sticky.py
index 720d84391e..ba867f0802 100644
--- a/apiserver/plane/ee/views/app/workspace/sticky.py
+++ b/apiserver/plane/ee/views/app/workspace/sticky.py
@@ -24,7 +24,9 @@ class WorkspaceStickyViewSet(BaseViewSet):
             .distinct()
         )
 
-    @allow_permission([ROLE.ADMIN, ROLE.MEMBER, ROLE.GUEST], level="WORKSPACE")
+    @allow_permission(
+        allowed_roles=[ROLE.ADMIN, ROLE.MEMBER, ROLE.GUEST], level="WORKSPACE"
+    )
     def create(self, request, slug):
         workspace = Workspace.objects.get(slug=slug)
         serializer = StickySerializer(data=request.data)
@@ -33,6 +35,9 @@ class WorkspaceStickyViewSet(BaseViewSet):
             return Response(serializer.data, status=status.HTTP_201_CREATED)
         return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
 
+    @allow_permission(
+        allowed_roles=[ROLE.ADMIN, ROLE.MEMBER, ROLE.GUEST], level="WORKSPACE"
+    )
     def list(self, request, slug):
         return self.paginate(
             request=request,
@@ -40,10 +45,10 @@ class WorkspaceStickyViewSet(BaseViewSet):
             on_results=lambda stickies: StickySerializer(stickies, many=True).data,
         )
 
-    @allow_permission([ROLE.ADMIN, ROLE.MEMBER, ROLE.GUEST], level="WORKSPACE")
+    @allow_permission(allowed_roles=[], creator=True, model=Sticky, level="WORKSPACE")
     def partial_update(self, request, *args, **kwargs):
         return super().partial_update(request, *args, **kwargs)
 
-    @allow_permission([ROLE.ADMIN, ROLE.MEMBER], creator=True, level="WORKSPACE")
+    @allow_permission(allowed_roles=[], creator=True, model=Sticky, level="WORKSPACE")
     def destroy(self, request, *args, **kwargs):
         return super().destroy(request, *args, **kwargs)