DJG300

Django permission required mixin for a class-based-view must have either a class property permission_required, or a method has_permission().

If neither exist, the view will (silently) allow anyone to access it.

Fixes

Add either property or method to the view:

class MyView(PermissionRequiredMixin, View):
    permission_required = 'polls.add_choice'