18 lines
497 B
Python
18 lines
497 B
Python
from rest_framework.exceptions import PermissionDenied
|
|
from rest_framework.permissions import BasePermission
|
|
|
|
from core.apps.accounts.choices import RoleChoice
|
|
|
|
|
|
class IsAdminRole(BasePermission):
|
|
def has_permission(self, request, view):
|
|
if not request.user.is_authenticated:
|
|
return False
|
|
|
|
if request.user.role != RoleChoice.ADMIN or request.user.role != RoleChoice.SUPERUSER:
|
|
raise PermissionDenied("Only admin can access this")
|
|
|
|
return True
|
|
|
|
|