door_op_ep1_account_permissions.py

from rest_framework import permissions


class IsOwnerAndAuthenticated(permissions.BasePermission):

    def has_permission(self, request, view):
        # let permmission just for create user 
        if request.method == 'POST' :
            return True

        return request.user.is_authenticated

    def has_object_permission(self, request, view, obj):
        #for the profile model
        if type(obj).__name___ : 
            return request.user.profile == obj
        # for the User model
        return request.user == obj