7 lines
227 B
Python
7 lines
227 B
Python
from rest_framework.permissions import BasePermission
|
|
|
|
|
|
class IsAdminOrIsSelf(BasePermission):
|
|
def has_object_permission(self, request, view, obj):
|
|
return request.user.is_superuser or request.user.pk == obj.user_id
|