diff --git a/flashcards/views.py b/flashcards/views.py
index 3a50220..e186d46 100644
--- a/flashcards/views.py
+++ b/flashcards/views.py
@@ -124,9 +124,6 @@ class UserDetail(GenericAPIView):
     serializer_class = UserSerializer
     permission_classes = [IsAuthenticated]
 
-    def get_queryset(self):
-        return User.objects.all()
-
     def patch(self, request, format=None):
         """
         Updates the user's password, or verifies their email address
@@ -290,8 +287,6 @@ class FlashcardViewSet(GenericViewSet, UpdateModelMixin, CreateModelMixin, Retri
         serializer = FlashcardSerializer(data=request.data)
         serializer.is_valid(raise_exception=True)
         data = serializer.validated_data
-        if not request.user.is_in_section(data['section']):
-            raise PermissionDenied("You have to be enrolled in this section to add a flashcard")
         data['author'] = request.user
         flashcard = Flashcard.objects.create(**data)
         self.perform_create(flashcard)