diff --git a/settings/puckomissions.py b/settings/puckomissions.py new file mode 100644 index 0000000..05372ca --- /dev/null +++ b/settings/puckomissions.py @@ -0,0 +1,10 @@ +from rest_framework.permissions import BasePermission +from rest_framework.permissions import SAFE_METHODS + +class IsAdminOrReadOnly(BasePermission): + + def has_permission(self, request, view): + if request.method in SAFE_METHODS: + return True + + return bool(request.user and request.user.is_staff)