'How to use django groups and perms in django-rest-framework

How to handle complex required permissions in any API using django-rest-framework?

For example, you have three tier support operators who have access to APIs, but they should only have access to respective endpoint and as the last tier, superadmin should have everything in hands.

How to solve this simple problem by django group and permissions?

There are lots of answers being related to AND or OR the perms in permission_classes like

def get_permissions(self):
    return (
    IsAuthenticated & (IsCommitteeHead|IsCommitteeMember|IsAdminUser)
    )()

permission_classes = [IsAuthenticated &(IsCommitteeHead|IsCommitteeMember|IsAdminUser)]

but I think hard coding always makes the code a complete mess!

django-rest-framework permissions

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution	Source

'How to use django groups and perms in django-rest-framework

Sources

Related Questions