T2T - Add authorization

api_authorization.py

from tastypie.authorization import Authorization
from tastypie.exceptions import Unauthorized


class AuthorizationByUser(Authorization):

    def read_list(self, object_list, bundle):
        return object_list.filter(author=bundle.request.user)

    def read_detail(self, object_list, bundle):
        return bundle.obj.author == bundle.request.user

    def create_list(self, object_list, bundle):
        raise Unauthorized('Can\'t create lists')

    def create_detail(self, object_list, bundle):
        return Unauthorized('Can\'t create lists')

    def update_list(self, object_list, bundle):
        return Unauthorized('Can\'t update lists')

    def update_detail(self, object_list, bundle):
        return Unauthorized('Can\'t update lists')

    def delete_list(self, object_list, bundle):
        raise Unauthorized("Sorry, no deletes.")

    def delete_detail(self, object_list, bundle):
        raise Unauthorized("Sorry, no deletes.")