20 lines
596 B
Python
20 lines
596 B
Python
from rest_framework import permissions
|
|
|
|
|
|
class UserPermission(permissions.BasePermission):
|
|
def has_permission(self, request, view):
|
|
result = False
|
|
if view.action == "activate":
|
|
result = True
|
|
elif view.action == "create":
|
|
result = True
|
|
elif view.action == "retrieve_authenticated":
|
|
result = request.user.is_authenticated
|
|
return result
|
|
|
|
def has_object_permission(self, request, view, obj):
|
|
result = False
|
|
if view.action == "activate":
|
|
result = request.user == obj
|
|
return result
|