adding GeoCourse to API

2020-07-19 09:58:10 +02:00
parent 0f19a5d077
commit 2666f3f78f
4 changed files with 90 additions and 4 deletions
--- a/rowers/permissions.py
+++ b/rowers/permissions.py
@@ -31,3 +31,10 @@ class IsCompetitorOrNot(permissions.BasePermission):

    def has_object_permission(self, request, view, obj):
        return (obj.userid == request.user.id)
+
+class IsManagerOrReadOnly(permissions.BasePermission):
+    def has_object_permission(self, request, view, obj):
+        if request.method in permissions.SAFE_METHODS:
+            return True
+
+        return obj.manager == request.user.rower