userausfall/userausfall/rest_api/permissions.py

from rest_framework import permissions


class UserPermission(permissions.BasePermission):
    def has_permission(self, request, view):
        result = False
        if view.action == "activate":
            result = True
        elif view.action == "create":
            result = True
        elif view.action == "retrieve_authenticated":
            result = request.user.is_authenticated
        return result

    def has_object_permission(self, request, view, obj):
        result = False
        if view.action == "activate":
            result = request.user == obj
        return result