from rest_framework import permissions class IsAuthor(permissions.BasePermission): def has_object_permission(self, request, view, obj): return obj.user == request.user class IsApplyStaffUser(permissions.BasePermission): """ Custom permission to only allow organisation Staff or higher """ def has_permission(self, request, view): return request.user.is_apply_staff def has_object_permission(self, request, view, obj): return request.user.is_apply_staff