14 lines
337 B
Python
14 lines
337 B
Python
from rest_framework.permissions import BasePermission
|
|
|
|
|
|
class CanAccessProfile(BasePermission):
|
|
def has_object_permission(self, request, view, obj):
|
|
if (
|
|
obj.isPublic
|
|
or obj.check_for_friendship(request.user)
|
|
or obj == request.user
|
|
):
|
|
return True
|
|
|
|
return False
|