Exposing permission policies using DRF

drf_serializer_permissions_example.py

class UserSerializer(serializers.ModelSerializer):
    """
    Exposing permissions as an established policy.
    """
    is_team_captain = serializers.SerializerMethodField('get_is_team_captain')
    
    class Meta:
        model = User
    
    def get_is_team_captain(self, obj):
        if obj is None:
            return False
        return obj == obj.team.captain


class UserSerializer(serializers.ModelSerializer):
    """
    Exposing permissions on a per-permission basis.
    """
    has_team_edit_permission = serializers.SerializerMethodField('get_has_team_edit_permission')
    
    class Meta:
        model = User
    
    def get_has_team_edit_permission(self, obj):
        if obj is None:
            return False
        return obj.has_perm('teams.change_team')