diff --git a/account/serializers.py b/account/serializers.py
index 21a8d41..82b957e 100644
--- a/account/serializers.py
+++ b/account/serializers.py
@@ -272,10 +272,13 @@ class UpdateUserNotificationSerializer(serializers.ModelSerializer):
 
     def create(self, validated_data):
         instance = UserNotification.objects.filter(user=self.context).last()
-        instance.push_notification = validated_data.get('push_notification',instance.push_notification)
-        instance.email_notification = validated_data.get('email_notification', instance.email_notification)
-        instance.sms_notification = validated_data.get('sms_notification', instance.sms_notification)
-        instance.save()
+        if instance:
+            instance.push_notification = validated_data.get('push_notification',instance.push_notification)
+            instance.email_notification = validated_data.get('email_notification', instance.email_notification)
+            instance.sms_notification = validated_data.get('sms_notification', instance.sms_notification)
+            instance.save()
+        else:
+            instance = UserNotification.objects.create(user=self.context)
         return instance
 
 class UserPhoneOtpSerializer(serializers.ModelSerializer):
diff --git a/guardian/views.py b/guardian/views.py
index e7f10bf..f55dd47 100644
--- a/guardian/views.py
+++ b/guardian/views.py
@@ -151,7 +151,7 @@ class SearchTaskListAPIView(viewsets.ModelViewSet):
 class TopJuniorListAPIView(viewsets.ModelViewSet):
     """Top juniors list"""
     serializer_class = TopJuniorSerializer
-    # permission_classes = [IsAuthenticated]
+    permission_classes = [IsAuthenticated]
     queryset = JuniorPoints.objects.all()
 
     def get_serializer_context(self):