fix: allow all users to fetch stocks

backend/marketfeed/views.py

@@ -72,7 +72,13 @@ def destroy(self, request, pk=None):
 class StockViewSet(viewsets.ModelViewSet):
     queryset = Stock.objects.all()
     serializer_class = StockSerializer
-    permission_classes = [permissions.IsAuthenticatedOrReadOnly]
+
+    def get_permissions(self):
+        if self.action == "create" or self.action == "destroy" or self.action == "update" or self.action == "patch":
+            self.permission_classes = [IsAuthenticated]
+        else:
+            self.permission_classes = [AllowAny]
+        return super().get_permissions()
 
     def list(self, request):
         pagination_class = StockResultsSetPagination()