73 lines
2.3 KiB
Python
73 lines
2.3 KiB
Python
from rest_framework.permissions import BasePermission, SAFE_METHODS
|
|
from rest_framework.permissions import IsAuthenticated
|
|
from rest_framework_api_key.permissions import HasAPIKey
|
|
|
|
|
|
#Podle svého uvážení (NEPOUŽÍVAT!!!)
|
|
class RolePermission(BasePermission):
|
|
allowed_roles = []
|
|
|
|
def has_permission(self, request, view):
|
|
# Je uživatel přihlášený a má roli z povolených?
|
|
user_has_role = (
|
|
request.user and
|
|
request.user.is_authenticated and
|
|
getattr(request.user, "role", None) in self.allowed_roles
|
|
)
|
|
|
|
# Má API klíč?
|
|
has_api_key = HasAPIKey().has_permission(request, view)
|
|
|
|
|
|
return user_has_role or has_api_key
|
|
|
|
|
|
#TOHLE POUŽÍT!!!
|
|
#Prostě stačí vložit: RoleAllowed('seller','cityClerk')
|
|
def RoleAllowed(*roles):
|
|
class SafeOrRolePermission(BasePermission):
|
|
"""
|
|
Allows safe methods for any authenticated user.
|
|
Allows unsafe methods only for users with specific roles.
|
|
|
|
Args:
|
|
RolerAllowed('seller', 'cityClerk')
|
|
"""
|
|
|
|
def has_permission(self, request, view):
|
|
# Allow safe methods for any authenticated user
|
|
if request.method in SAFE_METHODS:
|
|
return IsAuthenticated().has_permission(request, view)
|
|
|
|
# Otherwise, check the user's role
|
|
user = request.user
|
|
return user and user.is_authenticated and getattr(user, "role", None) in roles
|
|
|
|
return SafeOrRolePermission
|
|
|
|
# FIXME: je tohle nutné???
|
|
def OnlyRolesAllowed(*roles):
|
|
class SafeOrRolePermission(BasePermission):
|
|
"""
|
|
Allows all methods only for users with specific roles.
|
|
"""
|
|
|
|
def has_permission(self, request, view):
|
|
# Otherwise, check the user's role
|
|
user = request.user
|
|
return user and user.is_authenticated and getattr(user, "role", None) in roles
|
|
|
|
return SafeOrRolePermission
|
|
|
|
|
|
# For Settings.py
|
|
class AdminOnly(BasePermission):
|
|
""" Allows access only to users with the 'admin' role.
|
|
|
|
Args:
|
|
BasePermission (rest_framework.permissions.BasePermission): Base class for permission classes.
|
|
"""
|
|
def has_permission(self, request, view):
|
|
return request.user and request.user.is_authenticated and getattr(request.user, 'role', None) == 'admin'
|
|
|