DocManagerBackend/docmanager_backend/accounts/permissions.py

22 lines
525 B
Python
Raw Normal View History

2024-11-24 02:20:18 +08:00
from rest_framework.permissions import BasePermission
class IsStaff(BasePermission):
"""
Allows access only to users with staff role
"""
def has_permission(self, request, view):
return bool(
request.user and request.user.role in ("head", "admin", "planning", "staff")
)
class IsHead(BasePermission):
"""
Allows access only to users with staff role
"""
def has_permission(self, request, view):
return bool(request.user and request.user.role == "head")