python权限管理系统源码_Django-Rest-Framework 权限管理源码浅析(小结)

在django的views中不论是用类方式还是用装饰器方式来使用rest框架，django_rest_frame实现权限管理都需要两个东西的配合: authentication_classes 和 permission_classes

# 方式1: 装饰器

from rest_framework.decorators import api_view, authentication_classes, permission_classes

from rest_framework.authentication import SessionAuthentication, BasicAuthentication

from rest_framework.permissions import AllowAny

from rest_framework.response import Response

@api_view(["GET", ])

@permission_classes([AllowAny,])

@authentication_classes([SessionAuthentication, BasicAuthentication])

def test_example(request):

content = {

'user': unicode(request.user), # `django.contrib.auth.User` instance.

'auth': unicode(request.auth), # None

}

return Response(content)

# ------------------------------------------------------------