[Bugfix] 解决Node.root() 死循环，移动AdminRequired到permission中 (#1571)

apps/common/permissions.py

@@ -2,6 +2,9 @@
 #
 
 from rest_framework import permissions
+from django.contrib.auth.mixins import UserPassesTestMixin
+
+from orgs.utils import current_org
 
 
 class IsValidUser(permissions.IsAuthenticated, permissions.BasePermission):
@@ -50,3 +53,13 @@ class IsCurrentUserOrReadOnly(permissions.BasePermission):
         if request.method in permissions.SAFE_METHODS:
             return True
         return obj == request.user
+
+
+class AdminUserRequiredMixin(UserPassesTestMixin):
+    def test_func(self):
+        if not self.request.user.is_authenticated:
+            return False
+        elif not self.request.user:
+            self.raise_exception = True
+            return False
+        return True