From 5bcf6c72d920fab8982a3d454f7750b083317374 Mon Sep 17 00:00:00 2001 From: Josh Washburne Date: Tue, 3 Apr 2018 16:23:48 -0400 Subject: [PATCH] Don't include the DJ for create/modify permissions. --- savepointradio/api/permissions.py | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/savepointradio/api/permissions.py b/savepointradio/api/permissions.py index f140be9..894877e 100644 --- a/savepointradio/api/permissions.py +++ b/savepointradio/api/permissions.py @@ -18,7 +18,9 @@ class IsAdminOrReadOnly(permissions.BasePermission): if request.method in permissions.SAFE_METHODS: return True else: - return request.user.is_authenticated and request.user.is_staff + return (request.user.is_authenticated and + request.user.is_staff and + not request.user.is_dj) class IsAdminOwnerOrReadOnly(permissions.BasePermission): @@ -29,7 +31,9 @@ class IsAdminOwnerOrReadOnly(permissions.BasePermission): return True else: if request.user.is_authenticated: - return request.user.is_staff or request.user == obj.user + return (request.user.is_staff or + request.user == obj.user and + not request.user.is_dj) else: return False