src/notes/api/permissions/auth.py
changeset 117 9864fe2067cd
child 142 56850f5c73f6
equal deleted inserted replaced
116:672e3c4bbd0c 117:9864fe2067cd
       
     1 """
       
     2 Permissions for auth objects
       
     3 """
       
     4 import logging
       
     5 
       
     6 from rest_framework import permissions
       
     7 from rest_framework.permissions import BasePermission
       
     8 from rest_framework.compat import is_authenticated
       
     9 
       
    10 logger = logging.getLogger(__name__)
       
    11 
       
    12 
       
    13 class GroupPermission(BasePermission):
       
    14     """
       
    15     Pemissions for Groups objects
       
    16     """
       
    17 
       
    18     def has_permission(self, request, view):
       
    19         return request.user and is_authenticated(request.user)
       
    20 
       
    21 
       
    22     def has_object_permission(self, request, view, obj):
       
    23         if request.method not in permissions.SAFE_METHODS:
       
    24             return request.user == obj.profile.owner
       
    25         return True