fix(exports): Allow personal API keys on the GET /content action (#21462

)
PostHog · Apr 17, 2024 · 7000050 · 7000050
1 parent 9b610fc
commit 7000050
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/posthog/api/exports.py b/posthog/api/exports.py
@@ -143,7 +143,7 @@ def get_queryset(self):
         return queryset
 
     # TODO: This should be removed as it is only used by frontend exporter and can instead use the api/sharing.py endpoint
-    @action(methods=["GET"], detail=True)
+    @action(methods=["GET"], detail=True, required_scopes=["export:read"])
     def content(self, request: Request, *args: Any, **kwargs: Any) -> HttpResponse:
         instance = self.get_object()
         return get_content_response(instance, request.query_params.get("download") == "true")