mirror of
https://github.com/haiwen/seahub.git
synced 2025-06-30 08:53:49 +00:00
26 lines
660 B
Python
26 lines
660 B
Python
"""
|
|
Provides a set of pluggable permission policies.
|
|
"""
|
|
|
|
from rest_framework.permissions import BasePermission
|
|
|
|
from seaserv import check_permission
|
|
|
|
SAFE_METHODS = ['GET', 'HEAD', 'OPTIONS']
|
|
|
|
class IsRepoWritable(BasePermission):
|
|
"""
|
|
Allows access only for users who has write permission to the repo.
|
|
"""
|
|
|
|
def has_permission(self, request, view, obj=None):
|
|
if request.method in SAFE_METHODS:
|
|
return True
|
|
|
|
repo_id = view.kwargs.get('repo_id', '')
|
|
user = request.user.username if request.user else ''
|
|
|
|
if user and check_permission(repo_id, user) == 'rw':
|
|
return True
|
|
return False
|