1
2
3
4
5
6
7
8
9
10
11
12
13
14
| from rest_framework.permissions import SAFE_METHODS, BasePermission
|
|
| class HasObjectPermission(BasePermission):
| def has_object_permission(self, request, view, obj):
| return obj.has_permission(request.user)
|
|
| class MemberHasOwnerPermission(BasePermission):
| def has_object_permission(self, request, view, obj):
| if request.method not in SAFE_METHODS and not request.user.own_organization:
| return False
|
| return obj.has_permission(request.user)
|
|