[ACCEPTED]-Django Rest Framework custom permissions per view-django-rest-framework

Accepted answer
Score: 13

Well, the first step could be done easy 2 with DRF. See http://www.django-rest-framework.org/api-guide/permissions#custom-permissions.

You must do something like 1 that:

from functools import partial

from rest_framework import permissions

class MyPermission(permissions.BasePermission):

    def __init__(self, allowed_methods):
        self.allowed_methods = allowed_methods

    def has_permission(self, request, view):
        return request.method in self.allowed_methods

class ExampleView(APIView):
    permission_classes = (partial(MyPermission, ['GET', 'HEAD']),)
Score: 6

Custom permission can be created in this 1 way, more info in official documentation( https://www.django-rest-framework.org/api-guide/permissions/):

from rest_framework.permissions import BasePermission

# Custom permission for users with "is_active" = True.
class IsActive(BasePermission):
    Allows access only to "is_active" users.
    def has_permission(self, request, view):
        return request.user and request.user.is_active

# Usage
from rest_framework.views import APIView
from rest_framework.response import Response

from .permissions import IsActive   # Path to our custom permission

class ExampleView(APIView):
    permission_classes = (IsActive,)

    def get(self, request, format=None):
        content = {
            'status': 'request was permitted'
        return Response(content)
Score: 2

I took this idea and got it to work like 5 so:

class genericPermissionCheck(permissions.BasePermission):
    def __init__(self, action, entity):
        self.action = action
        self.entity = entity
    def has_permission(self, request, view):
        print self.action
        print self.entity
        if request.user and request.user.role.access_rights.filter(action=self.action,entity=self.entity):
            print 'permission granted'            
            return True
            return False

I used partially in the decorator for 4 the categories action in my viewset class 3 like so:

    def Categories(self, request):

"access_rights" maps to 2 an array of objects with a pair of actions 1 and object e.g. 'Edit' and 'Blog'

More Related questions