equal
deleted
inserted
replaced
|
1 """ |
|
2 Permissions for auth objects |
|
3 """ |
|
4 import logging |
|
5 |
|
6 from rest_framework import permissions |
|
7 from rest_framework.permissions import BasePermission |
|
8 from rest_framework.compat import is_authenticated |
|
9 |
|
10 logger = logging.getLogger(__name__) |
|
11 |
|
12 |
|
13 class GroupPermission(BasePermission): |
|
14 """ |
|
15 Pemissions for Groups objects |
|
16 """ |
|
17 |
|
18 def has_permission(self, request, view): |
|
19 return request.user and is_authenticated(request.user) |
|
20 |
|
21 |
|
22 def has_object_permission(self, request, view, obj): |
|
23 if request.method not in permissions.SAFE_METHODS: |
|
24 return request.user == obj.profile.owner |
|
25 return True |