Website/api/permissions.py

25 lines
702 B
Python

from rest_framework import permissions
class IsSuperUserOrReadOnly(permissions.BasePermission):
def has_permission(self, request, view):
if request.method in permissions.SAFE_METHODS:
return True
return request.user.is_superuser
class IsStaff(permissions.BasePermission):
def has_permission(self, request, view):
return request.user.is_staff
class IsSuperUserOrAuthReadOnly(permissions.BasePermission):
def has_permission(self, request, view):
if request.method in permissions.SAFE_METHODS:
return request.user != None
return request.user.is_superuser
class IsSuperUser(permissions.BasePermission):
def has_permission(self, request, view):
return request.user.is_superuser