[Django]-Django REST framework: restricting user access for objects

by

7👍

✅

You could use the ModelViewset, which contains all the logic for the typical CRUD:

class BooksViewSet(ModelViewset):
    serializer_class = BookSerializer
    permission_classes=[permissions.IsAuthenticated, ]

    def get_queryset(self):
        return Books.objects.filter(owner=self.request.user)

    def perform_create(self, serializer):
        serializer.data.owner = self.request.user
        super(BooksViewSet, self).perform_create(serializer)
👤Alex Morozov

Leave a comment