forked from mirror/MrDoc
31 lines
867 B
Python
31 lines
867 B
Python
# coding:utf-8
|
||
# @文件: permissions.py
|
||
# @创建者：州的先生
|
||
# #日期：2020/5/11
|
||
# 博客地址：zmister.com
|
||
|
||
from rest_framework.permissions import BasePermission,SAFE_METHODS
|
||
|
||
|
||
class AppPermission(BasePermission):
|
||
message = '只有VIP才能访问'
|
||
|
||
def has_permission(self, request, view):
|
||
# vip才有访问权限
|
||
# request.user:当前经过认证的用户对象
|
||
# 如果没有认证 request.user就是匿名用户
|
||
if not request.auth:
|
||
# 认证没有通过
|
||
return False
|
||
if request.user.vip:
|
||
return True
|
||
else:
|
||
return False
|
||
|
||
def has_object_permission(self, request, view, obj):
|
||
|
||
if request.method in SAFE_METHODS:
|
||
return True
|
||
|
||
# 示例必须要有一个名为`owner`的属性
|
||
return obj.owner == request.user |