profiles_api.permissions

Complexity

Total Complexity

4

Size/Duplication

Total Lines	24
Duplicated Lines	0 %

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	UpdateOwnProfile.has_object_permission()	0	6	2
A	PostOwnStatus.has_object_permission()	0	6	2

from rest_framework import permissions


class UpdateOwnProfile(permissions.BasePermission):
    """Allow users update their own profiles."""

    def has_object_permission(self, request, view, obj):
        """Check user is trying to edit their own profile."""

        if request.method in permissions.SAFE_METHODS:
            return True
        return obj.id == request.user.id


class PostOwnStatus(permissions.BasePermission):
    """Allow users update their own status."""

    def has_object_permission(self, request, view, obj):
        """Check user is trying to update their own status."""

        if request.method in permissions.SAFE_METHODS:
            return True
        return obj.user_profile.id == request.user.id