for testing and deploying your application
for finding and fixing issues
for empowering human code reviews
from rest_framework import permissions
class UpdateOwnProfile(permissions.BasePermission):
"""Allow users update their own profiles."""
def has_object_permission(self, request, view, obj):
"""Check user is trying to edit their own profile."""
if request.method in permissions.SAFE_METHODS:
return True
return obj.id == request.user.id
class PostOwnStatus(permissions.BasePermission):
"""Allow users update their own status."""
"""Check user is trying to update their own status."""
return obj.user_profile.id == request.user.id