def has_permission(self, request, view): if request.method == 'POST': org = request.data.get('org') if not org: # Fail happily because OPTIONS goes down this path too with a fake POST. # If this is a real POST, we'll complain about the missing org in the view. return True return CourseEditor.can_create_course(request.user, org) else: return True # other write access attempts will be caught by object permissions below
def has_permission(self, request, view): if request.method in SAFE_METHODS: return True else: org = request.data.get('org') if not org: # Fail happily because OPTIONS goes down this path too with a fake POST. # If this is a real POST, we'll complain about the missing org in the view. return True return CourseEditor.can_create_course(request.user, org)
def has_permission(self, request, view): if self.django_perms.has_permission(request, view): return True elif request.user.is_staff: return True elif request.method == 'POST': course = request.data.get('course') if not course: return False org, _ = parse_course_key_fragment(course) return org and CourseEditor.can_create_course(request.user, org) else: return True # other write access attempts will be caught by object permissions below
def has_permission(self, request, view): if self.django_perms.has_permission(request, view): return True elif request.user.is_staff: return True elif request.method == 'POST': course = request.data.get('course') if not course: # Fail happily because OPTIONS goes down this path too with a fake POST. # If this is a real POST, we'll complain about the missing course in the view. return True org, _ = parse_course_key_fragment(course) return org and CourseEditor.can_create_course(request.user, org) else: return True # other write access attempts will be caught by object permissions below
def has_permission(self, request, view): if request.method == 'POST': org = request.data.get('org') return org and CourseEditor.can_create_course(request.user, org) else: return True # other write access attempts will be caught by object permissions below