15 lines
371 B
Python
15 lines
371 B
Python
# permissions.py
|
|
from rest_framework import permissions
|
|
|
|
|
|
def check_admin(user):
|
|
"""check for admin permission for restricted views"""
|
|
return user.is_staff or user.groups.filter(name="admin").exists()
|
|
|
|
|
|
class AdminOnly(permissions.BasePermission):
|
|
"""allow only admin"""
|
|
|
|
def has_permission(self, request, view):
|
|
return check_admin(request.user)
|
|
|