News Viewset created

src/homework/migrations/0004_auto_20180125_1817.py

+# -*- coding: utf-8 -*-
+# Generated by Django 1.11.5 on 2018-01-25 17:17
+from __future__ import unicode_literals
+
+from django.conf import settings
+from django.db import migrations, models
+import django.db.models.deletion
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('homework', '0003_auto_20180124_1818'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='solution',
+            name='created_by',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL),
+        ),
+    ]

src/homework/models.py

@@ -51,7 +51,7 @@ class Solution(models.Model):
     task = models.ForeignKey(Task, related_name='task_solution', on_delete=models.CASCADE, )
     # student = models.ForeignKey(account.models.Profile, related_name='student_solution',  on_delete=models.CASCADE)
     date = models.DateTimeField(auto_now_add=True, editable=False, )
-    ready = models.BooleanField(default=False, ) #if(Soulution.date <= Task.deadline)
+    ready = models.BooleanField(default=False, )  # if(Soulution.date <= Task.deadline)
     accepted = models.BooleanField(default=False, )
     files = models.FileField(
         validators=[validators.FileExtensionValidator(

src/homework/permissions.py

@@ -34,4 +34,4 @@ class IsStaffOrReadOnlyForAuthenticated(BasePermission):
         return (request.user.is_staff or
                 request.method in SAFE_METHODS and
                 request.user.is_authenticated
-        )
+                )

src/homework/views.py

@@ -17,7 +17,7 @@ class TasksViewSet(viewsets.ModelViewSet):
 class SolutionViewSet(viewsets.ModelViewSet):
     serializer_class = serializers.SolutionSerializer
     queryset = models.Solution.objects.all()
-    permission_classes = (permissions.SolutionPermission, )
+    permission_classes = (permissions.IsStaffOrReadOnlyForAuthenticated, )
 
     def create(self, request, *args, **kwargs):
         serializer = self.get_serializer(data=request.data)

src/kszkepzes/urls.py

@@ -22,4 +22,5 @@ urlpatterns = [
     url(r'^api/v1/homework/', include('homework.urls')),
     url(r'^api/v1/', include('stats.urls')),
     url(r'^api/v1/', include('account.urls')),
+    url(r'^api/v1/', include('news.urls')),
 ]

src/news/permissions.py

+from rest_framework.permissions import BasePermission
+from rest_framework.permissions import SAFE_METHODS
+
+
+class IsStaffOrReadOnlyForAuthenticated(BasePermission):
+
+    def has_permission(self, request, view):
+        return (request.user.is_staff or
+                request.method in SAFE_METHODS and
+                request.user.is_authenticated
+                )

src/news/views.py

-from rest_framework.permissions import IsAdminUser, IsAuthenticated
+from news.permissions import IsStaffOrReadOnlyForAuthenticated
 from rest_framework import viewsets
 from news.models import Article
 from news.serializers import ArticleListSerializer
@@ -6,5 +6,5 @@ from news.serializers import ArticleListSerializer
 
 class NewsViewSet(viewsets.ModelViewSet):
     serializer_class = ArticleListSerializer
-    permission_classes = [IsAuthenticated]
+    permission_classes = [IsStaffOrReadOnlyForAuthenticated]
     queryset = Article.objects.all()