permissions.py 276 B

1234567891011
  1. from rest_framework import permissions
  2. class IsOwner(permissions.BasePermission):
  3. """
  4. Custom permission to only allow owners of an object to view or edit it.
  5. """
  6. def has_object_permission(self, request, view, obj):
  7. return obj.owner == request.user