Django-NotesApp/project/permissions/permissions.py

9 lines
371 B
Python
Raw Normal View History

2023-05-20 08:20:20 +08:00
from rest_framework.permissions import BasePermission
class IsOwner(BasePermission):
"""
Custom permission to only allow the creator of an object to view and manipulate it.
"""
def has_object_permission(self, request, view, obj):
# Only allow the creator of the object to view and manipulate it.
return obj.creator == request.user