src/notes/api/permissions/auth.py
changeset 142 56850f5c73f6
parent 117 9864fe2067cd
equal deleted inserted replaced
141:cd5e8fb64b74 142:56850f5c73f6
     3 """
     3 """
     4 import logging
     4 import logging
     5 
     5 
     6 from rest_framework import permissions
     6 from rest_framework import permissions
     7 from rest_framework.permissions import BasePermission
     7 from rest_framework.permissions import BasePermission
     8 from rest_framework.compat import is_authenticated
       
     9 
     8 
    10 logger = logging.getLogger(__name__)
     9 logger = logging.getLogger(__name__)
    11 
    10 
    12 
    11 
    13 class GroupPermission(BasePermission):
    12 class GroupPermission(BasePermission):
    14     """
    13     """
    15     Pemissions for Groups objects
    14     Pemissions for Groups objects
    16     """
    15     """
    17 
    16 
    18     def has_permission(self, request, view):
    17     def has_permission(self, request, view):
    19         return request.user and is_authenticated(request.user)
    18         return request.user and request.user.is_authenticated
    20 
    19 
    21 
    20 
    22     def has_object_permission(self, request, view, obj):
    21     def has_object_permission(self, request, view, obj):
    23         if request.method not in permissions.SAFE_METHODS:
    22         if request.method not in permissions.SAFE_METHODS:
    24             return request.user == obj.profile.owner
    23             return request.user == obj.profile.owner