Skip to content

Instantly share code, notes, and snippets.

@bogsio
Created July 23, 2014 17:12
Show Gist options
  • Save bogsio/fd5b3d80017d4572e48f to your computer and use it in GitHub Desktop.
Save bogsio/fd5b3d80017d4572e48f to your computer and use it in GitHub Desktop.
TPT2 - Add list authorization
class AuthorizationByList(Authorization):
def read_list(self, object_list, bundle):
author = bundle.request.user
print dir(author)
return object_list.filter(todo_list_id__in=[l.id for l in author.todo_lists.all()])
def read_detail(self, object_list, bundle):
return bundle.obj.todo_list.author == bundle.request.user
def create_list(self, object_list, bundle):
raise Unauthorized('Can\'t create items')
def create_detail(self, object_list, bundle):
return Unauthorized('Can\'t create items')
def update_list(self, object_list, bundle):
return Unauthorized('Can\'t update items')
def update_detail(self, object_list, bundle):
return Unauthorized('Can\'t update items')
def delete_list(self, object_list, bundle):
raise Unauthorized("Sorry, no deletes.")
def delete_detail(self, object_list, bundle):
raise Unauthorized("Sorry, no deletes.")
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment