Why Gemfury?
Push, build, and install
RubyGems
npm packages
Python packages
Maven artifacts
PHP packages
Go Modules
Debian packages
RPM packages
NuGet packages
doctorondemand / djangorestframework python
Repository URL to install this package:
|
Version:
3.6.4 ▾
|
ÕÉXÿ ã @ s d Z d d l m Z d d l m Z d d l m Z d d l m Z d Z Gd d
d
e
Z Gd d d e Z Gd
d d e Z
Gd d d e Z Gd d d e Z Gd d d e Z Gd d d e Z Gd d d e Z d S)z2
Provides a set of pluggable permission policies.
é )Úunicode_literals)ÚHttp404)Ú
exceptions)Úis_authenticatedÚGETÚHEADÚOPTIONSc @ s. e Z d Z d Z d d Z d d Z d S)ÚBasePermissionzH
A base class from which all permission classes should inherit.
c C s d S)zL
Return `True` if permission is granted, `False` otherwise.
T© )ÚselfÚrequestÚviewr
r
úY/Users/carlton/Documents/Django-Stack/django-rest-framework/rest_framework/permissions.pyÚhas_permission s z BasePermission.has_permissionc C s d S)zL
Return `True` if permission is granted, `False` otherwise.
Tr
)r r r
Úobjr
r
r Úhas_object_permission s z$BasePermission.has_object_permissionN)Ú__name__Ú
__module__Ú __qualname__Ú__doc__r r r
r
r
r r s r c @ s" e Z d Z d Z d d Z d S)ÚAllowAnyz¹
Allow any access.
This isn't strictly required, since you could use an empty
permission_classes list, but it's useful because it makes the intention
more explicit.
c C s d S)NTr
)r r r
r
r
r r ( s zAllowAny.has_permissionN)r r r r r r
r
r
r r s r c @ s" e Z d Z d Z d d Z d S)ÚIsAuthenticatedz4
Allows access only to authenticated users.
c C s | j o t | j S)N)Úuserr )r r r
r
r
r r 1 s z IsAuthenticated.has_permissionN)r r r r r r
r
r
r r , s r c @ s" e Z d Z d Z d d Z d S)Ú IsAdminUserz,
Allows access only to admin users.
c C s | j o | j j S)N)r Úis_staff)r r r
r
r
r r : s zIsAdminUser.has_permissionN)r r r r r r
r
r
r r 5 s r c @ s" e Z d Z d Z d d Z d S)ÚIsAuthenticatedOrReadOnlyzL
The request is authenticated as a user, or is a read-only request.
c C s% | j t k p$ | j o$ t | j S)N)ÚmethodÚ SAFE_METHODSr r )r r r
r
r
r r C s z(IsAuthenticatedOrReadOnly.has_permissionN)r r r r r r
r
r
r r > s r c @ sp e Z d Z d Z d g d g d g d d g d d g d d g d
d g i Z d Z d
d Z d d Z d S)ÚDjangoModelPermissionsa}
The request is authenticated using `django.contrib.auth` permissions.
See: https://docs.djangoproject.com/en/dev/topics/auth/#permissions
It ensures that the user is authenticated, and has the appropriate
`add`/`change`/`delete` permissions on the model.
This permission can only be applied against view classes that
provide a `.queryset` attribute.
r r r ÚPOSTz %(app_label)s.add_%(model_name)sÚPUTz#%(app_label)s.change_%(model_name)sÚPATCHÚDELETEz#%(app_label)s.delete_%(model_name)sTc sZ d | j j d | j j i | | j k r< t j | f d d | j | D S)z
Given a model and an HTTP method, return the list of permission
codes that the user is required to have.
Ú app_labelÚ
model_namec s g | ] } | q Sr
r
)Ú.0Úperm)Úkwargsr
r ú
<listcomp>s s zCDjangoModelPermissions.get_required_permissions.<locals>.<listcomp>)Ú_metar# r$ Ú perms_mapr ÚMethodNotAllowed)r r Ú model_clsr
)r' r Úget_required_permissionsf s
z/DjangoModelPermissions.get_required_permissionsc C s¨ t | d d r d St | d r4 | j } n t | d d } | d k s^ t d | j | j | j } | j o§ t | j s | j o§ | j j
| S)NZ_ignore_model_permissionsFTÚ get_querysetÚquerysetzoCannot apply DjangoModelPermissions on a view that does not set `.queryset` or have a `.get_queryset()` method.) ÚgetattrÚhasattrr. ÚAssertionErrorr- r Úmodelr r Úauthenticated_users_onlyÚ has_perms)r r r
r/ Úpermsr
r
r r u s z%DjangoModelPermissions.has_permissionN)r r r r r* r4 r- r r
r
r
r r K s
r c @ s e Z d Z d Z d Z d S)Ú$DjangoModelPermissionsOrAnonReadOnlyzj
Similar to DjangoModelPermissions, except that anonymous users are
allowed read-only access.
FN)r r r r r4 r
r
r
r r7 s r7 c @ sj e Z d Z d Z d g d g d g d d g d d g d d g d
d g i Z d d
Z d d Z d S)ÚDjangoObjectPermissionsa
The request is authenticated using Django's object-level permissions.
It requires an object-permissions-enabled backend, such as Django Guardian.
It ensures that the user is authenticated, and has the appropriate
`add`/`change`/`delete` permissions on the object using .has_perms.
This permission can only be applied against view classes that
provide a `.queryset` attribute.
r r r r z %(app_label)s.add_%(model_name)sr z#%(app_label)s.change_%(model_name)sr! r" z#%(app_label)s.delete_%(model_name)sc sZ d | j j d | j j i | | j k r< t j | f d d | j | D S)Nr# r$ c s g | ] } | q Sr
r
)r% r& )r' r
r r( ´ s zKDjangoObjectPermissions.get_required_object_permissions.<locals>.<listcomp>)r) r# r$ r* r r+ )r r r, r
)r' r Ú get_required_object_permissions« s
z7DjangoObjectPermissions.get_required_object_permissionsc C sÈ t | d r | j } n t | d d } | d k sH t d | j } | j } | j | j | } | j | | sÄ | j t k r t
| j d | } | j | | sÀ t
d Sd S)Nr. r/ zpCannot apply DjangoObjectPermissions on a view that does not set `.queryset` or have a `.get_queryset()` method.r FT) r1 r. r0 r2 r3 r r9 r r5 r r ) r r r
r r/ r, r r6 Z
read_permsr
r
r r ¶ s z-DjangoObjectPermissions.has_object_permissionN)r r r r r* r9 r r
r
r
r r8 s
r8 N)zGETzHEADzOPTIONS)r Ú
__future__r Ú django.httpr Úrest_frameworkr Úrest_framework.compatr r Úobjectr r r r r r r7 r8 r
r
r
r Ú<module> s
C