14 lines
315 B
Python
14 lines
315 B
Python
|
# -*- coding:utf-8 -*-
|
||
|
|
__author__ = "leo"
|
||
|
|
|
||
|
|
from rest_framework import permissions
|
||
|
|
|
||
|
|
|
||
|
|
class IsOwnerOrReadOnly(permissions.BasePermission):
|
||
|
|
def has_object_permission(self, request, view, obj):
|
||
|
|
if request.method in permissions.SAFE_METHODS:
|
||
|
|
return True
|
||
|
|
|
||
|
|
return obj.user == request.user
|
||
|
|
|