django-rest-framework权限控制

from rest_framework.views import APIView
from rest_framework.permissions import BasePermission


class MyBasePermission(BasePermission):
    
    # 权限不通过的返回的提示信息
    message = "没有权限"
    
    # 重写BasePermission的has_permission方法
    def has_permission(self, request, view):
        if request.user.role == 1:
            # return True表示权限通过
            return True
        # return False表示权限未通过
        return False


class UserView(APIView):
    # 认证的类对象列表
    authentication_classes = [MyAuthentication, ]
    # 权限控制的类对象列表
    permission_classes = [MyBasePermission, ]
    # 频率限制的类对象列表
    throttle_classes = [VisitThrottle, ]

    def get(self, request, *args, **kwargs):
        data = {'code': 1000, 'msg': 'xxx'}
        return HttpResponse(json.dumps(data), status=201)