docs re-org

backend/igny8_core/auth/views.py

@@ -496,8 +496,9 @@ class SiteViewSet(AccountModelViewSet):
             from rest_framework.permissions import AllowAny
             return [AllowAny()]
         if self.action == 'create':
+            # For create, only require authentication - not active account status
             return [permissions.IsAuthenticated()]
-        return [IsEditorOrAbove()]
+        return [IsAuthenticatedAndActive(), HasTenantAccess(), IsEditorOrAbove()]
     
     def get_queryset(self):
         """Return sites accessible to the current user."""