added decorator to worker listing view method

smash/web/views/worker.py

@@ -14,7 +14,7 @@ from web.decorators import PermissionDecorator
 
 logger = logging.getLogger(__name__)
 
-
+@PermissionDecorator('change_worker', 'configuration')
 def worker_list(request, worker_type=WORKER_STAFF):
     doctors_list = Worker.get_workers_by_worker_type(worker_type, study_id=GLOBAL_STUDY_ID, ).order_by('-last_name')
     context = {