changes to restrict view access to admins

portal/views/secure/dataset.py

@@ -20,8 +20,8 @@ from portal.forms import DataSetDisplayFieldsForm, DataSetForm
 from portal.models import DataFile, DataSet, Lab, Profile, ShareGroup
 from portal.views import (ActivePageViewMixin, AjaxDatatableBackboneMixin,
                           CreateViewMixin, DeleteViewMixin, JSONListView,
-                          JSONView, LogMixin, SuccessMessageMixin,
-                          UpdateViewMixin)
+                          JSONView, LogMixin, StaffViewMixin,
+                          SuccessMessageMixin, UpdateViewMixin)
 
 logger = logging.getLogger('debug')
 
@@ -305,7 +305,7 @@ class DataSetFileListView(DataSetDetailsView):
         return HttpResponse('\n'.join(files + annotations), content_type="text/plain")
 
 
-class DataSetFileListJSONView(LoginRequiredMixin, JSONView):
+class DataSetFileListJSONView(StaffViewMixin, JSONView):
     model = DataSet
     slug_url_kwarg = 'iric_data_id'
     slug_field = 'iric_data_id'