bogsio

# ...
from tastypie.resources import ModelResource, fields
# ...

class TodoItemResource(ModelResource):
    todo_list = fields.ForeignKey(TodoListResource, 'todo_list')

    class Meta:
        authentication = SessionAuthentication()
        authorization = AuthorizationByList()

bogsio

{  
   "meta":{  
      "limit":20,
      "next":null,
      "offset":0,
      "previous":null,
      "total_count":1
   },
   "objects":[  
      {  

bogsio

class TodoItemResource(ModelResource):
    class Meta:
        authentication = SessionAuthentication()
        authorization = AuthorizationByList()
        queryset = TodoItem.objects.all()
        resource_name = 'item'
        filtering = {
            'text': ('icontains',)
        }

bogsio

{  
   "item_count":2,
   "list_count":1
}

bogsio

class TodoListResource(ModelResource):

    def prepend_urls(self):
        return [
            url(r"^(?P<resource_name>%s)/stats%s$" %
                (self._meta.resource_name, trailing_slash()),
                self.wrap_view('stats'), name="api_list_stats"),
        ]

    def dehydrate(self, bundle):

bogsio

class TodoListResource(ModelResource):
    def dehydrate(self, bundle):
        items = bundle.obj.items.all()
        bundle.data['item_count'] = items.count()
        bundle.data['items'] = [i.to_dict() for i in items]

        return bundle

    class Meta:
        authentication = SessionAuthentication()

bogsio

class TodoItem(models.Model):
    text = models.TextField('Item Text')
    todo_list = models.ForeignKey(TodoList, related_name='items')

    def to_dict(self):
        return {'text': self.text, 'id': self.pk}

    def __unicode__(self):
        return self.text[:50] + ' ' + unicode(self.todo_list)

bogsio

class AuthorizationByList(Authorization):

    def read_list(self, object_list, bundle):
        author = bundle.request.user
        print dir(author)
        return object_list.filter(todo_list_id__in=[l.id for l in author.todo_lists.all()])

    def read_detail(self, object_list, bundle):
        return bundle.obj.todo_list.author == bundle.request.user

bogsio

class TodoListResource(ModelResource):
    class Meta:
        authentication = SessionAuthentication()
        authorization = AuthorizationByUser()
        queryset = TodoList.objects.all()
        resource_name = 'list'

bogsio

from tastypie.authorization import Authorization
from tastypie.exceptions import Unauthorized


class AuthorizationByUser(Authorization):

    def read_list(self, object_list, bundle):
        return object_list.filter(author=bundle.request.user)

    def read_detail(self, object_list, bundle):