Skip to content
Snippets Groups Projects
Commit bb1bf58a authored by Bodor Máté's avatar Bodor Máté
Browse files

update permissions and views

parent 648738ab
No related branches found
No related tags found
No related merge requests found
......@@ -30,8 +30,13 @@ class IsAuthenticatedOrReadOnly(BasePermission):
class IsStaffOrReadOnlyForAuthenticated(BasePermission):
def has_object_permission(self, request, view, obj):
return (request.user.is_staff or
request.method in SAFE_METHODS and
request.user.is_authenticated
"""
The request is authenticated as a staff, or is a read-only request for authenticated.
"""
def has_object_permission(self, request, view):
return (
request.user.is_staff or
request.method in SAFE_METHODS and
request.user.is_authenticated
)
......@@ -11,13 +11,13 @@ from rest_framework import status
class TasksViewSet(viewsets.ModelViewSet):
serializer_class = serializers.TaskSerializer
queryset = models.Task.objects.all()
permission_classes = (permissions.IsStaffOrReadOnly, )
permission_classes = (permissions.IsStaffOrReadOnlyForAuthenticated, )
class SolutionViewSet(viewsets.ModelViewSet):
serializer_class = serializers.SolutionSerializer
queryset = models.Solution.objects.all()
permission_classes = (permissions.SolutionPermission, )
permission_classes = (permissions.IsStaffOrReadOnlyForAuthenticated, )
def create(self, request, *args, **kwargs):
serializer = self.get_serializer(data=request.data)
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment