TPT2 - Add list authorization

api_authorization.py

class AuthorizationByList(Authorization):

    def read_list(self, object_list, bundle):
        author = bundle.request.user
        print dir(author)
        return object_list.filter(todo_list_id__in=[l.id for l in author.todo_lists.all()])

    def read_detail(self, object_list, bundle):
        return bundle.obj.todo_list.author == bundle.request.user

    def create_list(self, object_list, bundle):
        raise Unauthorized('Can\'t create items')

    def create_detail(self, object_list, bundle):
        return Unauthorized('Can\'t create items')

    def update_list(self, object_list, bundle):
        return Unauthorized('Can\'t update items')

    def update_detail(self, object_list, bundle):
        return Unauthorized('Can\'t update items')

    def delete_list(self, object_list, bundle):
        raise Unauthorized("Sorry, no deletes.")

    def delete_detail(self, object_list, bundle):
        raise Unauthorized("Sorry, no deletes.")