decorator.py

decorators.py

from django.core.exceptions import PermissionDenied
from django.shortcuts import get_object_or_404

from form.models import Form


def user_permission_required(codename, form_pk_param="pk"):
    def decorate(view):
        def decorated(request, *args, **kwargs):
            form = get_object_or_404(Form, pk=kwargs[form_pk_param])
            upqs = form.userpermission_set.filter(
                user=request.user,
                permission__codename=codename,
            )
            if not upqs.exists():
                raise PermissionDenied
            response = view(request, *args, **kwargs)
            return response
        return decorated
    return decorate