From 30ea69ac939f3edea80bc60e4e1105cc185ee915 Mon Sep 17 00:00:00 2001 From: Josh Washburne Date: Mon, 9 Apr 2018 12:08:23 -0400 Subject: [PATCH] New permission to exclude DJ. --- savepointradio/api/permissions.py | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/savepointradio/api/permissions.py b/savepointradio/api/permissions.py index a5e07e6..73e6b15 100644 --- a/savepointradio/api/permissions.py +++ b/savepointradio/api/permissions.py @@ -32,7 +32,7 @@ class IsAdminOwnerOrReadOnly(permissions.BasePermission): else: if request.user.is_authenticated: return ((request.user.is_staff or - request.user == obj.user) and + request.user == obj.user) and not request.user.is_dj) else: return False @@ -46,3 +46,13 @@ class IsDJ(permissions.BasePermission): return request.user.is_dj else: return False + + +class IsAuthenticatedAndNotDJ(permissions.BasePermission): + message = 'Only an authenticated user can make changes to this object.' + + def has_permission(self, request, view): + if request.user.is_authenticated: + return not request.user.is_dj + else: + return False