add new user message oauth scope and throttling classes

CenterForOpenScience · Dec 10, 2024 · c91534e · c91534e
1 parent cd45df2
commit c91534e
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/api/users/views.py b/api/users/views.py
@@ -971,10 +971,10 @@ class UserMessageView(JSONAPIBaseView, generics.CreateAPIView):
         UserMessagePermissions,
     )
 
-    required_read_scopes = [CoreScopes.USERS_READ]
-    required_write_scopes = [CoreScopes.USERS_WRITE]
+    required_read_scopes = [CoreScopes.USERS_MESSAGE_READ_EMAIL]
+    required_write_scopes = [CoreScopes.USERS_MESSAGE_WRITE]
     parser_classes = (JSONAPIMultipleRelationshipsParser, JSONAPIMultipleRelationshipsParserForRegularJSON)
-
+    throttle_classes = [BurstRateThrottle, SendEmailThrottle]
     serializer_class = UserMessageSerializer
 
     view_category = 'users'

diff --git a/framework/auth/oauth_scopes.py b/framework/auth/oauth_scopes.py
@@ -29,6 +29,8 @@ class CoreScopes:
 
     USERS_READ = 'users_read'
     USERS_WRITE = 'users_write'
+    USERS_MESSAGE_READ_EMAIL = 'users_message_read_email'
+    USERS_MESSAGE_WRITE_EMAIL = 'users_message_write_email'
     USERS_CREATE = 'users_create'
 
     USER_SETTINGS_READ = 'user.settings_read'