Any authenticated user can use create or update images

program/views.py

@@ -316,7 +316,7 @@ class APIUserViewSet(
 class APIImageViewSet(viewsets.ModelViewSet):
     queryset = Image.objects.all()
     serializer_class = ImageSerializer
-    permission_classes = [permissions.DjangoModelPermissionsOrAnonReadOnly]
+    permission_classes = [permissions.IsAuthenticated]
     pagination_class = LimitOffsetPagination
 
     def get_queryset(self):