Building RESTful Python Web Services

Configuring permission policies

Now, we will configure permission policies for the class-based views related to games. We will override the value for the permission_classes class attribute for the GameList and GameDetail classes.

The following lines show the new code for the GameList class in the views.py file. The new lines are highlighted. Don't remove the code we added for the perform_create method for this class. The code file for the sample is included in the restful_python_chapter_03_04 folder:

class GameList(generics.ListCreateAPIView): 
    queryset = Game.objects.all() 
    serializer_class = GameSerializer 
    name = 'game-list' 
    permission_classes = ( 
        permissions.IsAuthenticatedOrReadOnly, 
        IsOwnerOrReadOnly, 
        )

The following lines show the new code ...