geonode.base.api.permissions

Attributes

logger

Classes

IsSelf	Grant permission only if the current instance is the request user.
IsSelfOrReadOnly	Grant permissions if instance IS the request user, or read-only.
IsSelfOrAdmin	Grant R/W to self and superusers/staff members. Deny others.
IsSelfOrAdminOrReadOnly	Grant R/W to self and superusers/staff members, R/O to others.
IsSelfOrAdminOrAuthenticatedReadOnly	Grant R/W to self and superusers/staff members, R/O to auth.
IsOwnerOrAdmin	Object-level permission to only allow admin and owners of an object to edit it.
IsOwnerOrReadOnly	Object-level permission to only allow owners of an object to edit it.
IsManagerEditOrAdmin	Object-level permission to only allow admin and managers to edit a group.
ResourceBasePermissionsFilter	A filter backend that limits results to those where the requesting user
UserHasPerms

Module Contents

geonode.base.api.permissions.logger

class geonode.base.api.permissions.IsSelf

Bases: rest_framework.permissions.BasePermission

Grant permission only if the current instance is the request user. Used to allow users to edit their own account, nothing to others (even superusers).

has_permission(request, view)

Always return False here. The fine-grained permissions are handled in has_object_permission().

has_object_permission(request, view, obj)

class geonode.base.api.permissions.IsSelfOrReadOnly

Bases: IsSelf

Grant permissions if instance IS the request user, or read-only. Used to allow users to edit their own account, and others to read.

has_object_permission(request, view, obj)

class geonode.base.api.permissions.IsSelfOrAdmin

Bases: IsSelf

Grant R/W to self and superusers/staff members. Deny others.

has_permission(request, view)

Always return False here. The fine-grained permissions are handled in has_object_permission().

has_object_permission(request, view, obj)

class geonode.base.api.permissions.IsSelfOrAdminOrReadOnly

Bases: IsSelfOrAdmin

Grant R/W to self and superusers/staff members, R/O to others.

has_permission(request, view)

Always return False here. The fine-grained permissions are handled in has_object_permission().

has_object_permission(request, view, obj)

class geonode.base.api.permissions.IsSelfOrAdminOrAuthenticatedReadOnly

Bases: IsSelfOrAdmin

Grant R/W to self and superusers/staff members, R/O to auth.

has_object_permission(request, view, obj)

class geonode.base.api.permissions.IsOwnerOrAdmin

Bases: rest_framework.permissions.BasePermission

Object-level permission to only allow admin and owners of an object to edit it. Assumes the model instance has an owner attribute.

has_object_permission(request, view, obj)

class geonode.base.api.permissions.IsOwnerOrReadOnly

Bases: IsOwnerOrAdmin

Object-level permission to only allow owners of an object to edit it. Assumes the model instance has an owner attribute.

has_object_permission(request, view, obj)

class geonode.base.api.permissions.IsManagerEditOrAdmin

Bases: rest_framework.permissions.BasePermission

Object-level permission to only allow admin and managers to edit a group.

has_permission(request, view)

has_object_permission(request, view, obj)

class geonode.base.api.permissions.ResourceBasePermissionsFilter

Bases: rest_framework.filters.BaseFilterBackend

A filter backend that limits results to those where the requesting user has read object level permissions.

filter_queryset(request, queryset, view)

class geonode.base.api.permissions.UserHasPerms(perms_dict={})

Bases: rest_framework.permissions.DjangoModelPermissions

perms_map

perms_dict

__call__()

has_permission(request, view)