from rest_framework import permissions class UserPermission(permissions.BasePermission): def has_permission(self, request, view): result = False if view.action == "activate": result = True elif view.action == "create": result = True elif view.action == "retrieve_authenticated": result = request.user.is_authenticated return result def has_object_permission(self, request, view, obj): result = False if view.action == "activate": result = request.user == obj return result