Use correct auth/permissions.

edxval/urls.py

@@ -35,7 +35,7 @@ urlpatterns = patterns(
         name="course-video-list"
     ),
     url(
-        r'^youtube/(?P<youtube_id>[\w]+)$',
+        r'^youtube/(?P<youtube_id>[-_\w]+)$',
         views.YoutubeVideoList.as_view(),
         name="youtube-video-list"
     ),

edxval/views.py

@@ -77,7 +77,8 @@ class YoutubeVideoList(generics.ListAPIView):
     """
     Get a list of videos for the given youtube id
     """
-    permission_classes = (DjangoModelPermissions,)
+    authentication_classes = (OAuth2Authentication, SessionAuthentication)
+    permission_classes = (ReadRestrictedDjangoModelPermissions,)
     serializer_class = VideoSerializer
     queryset = Video.objects.all()