feat: permit unauthenticated access to preview_document endpoint

crm/views/seller_views.py

@@ -215,7 +215,10 @@ import io
 from django.http import FileResponse
 from django.views.decorators.clickjacking import xframe_options_exempt
 
+from rest_framework.permissions import AllowAny
+
 @api_view(['GET'])
+@permission_classes([AllowAny])
 @xframe_options_exempt
 def preview_document(request):
     filename = request.query_params.get('file', 'document.pdf')