Django之viewsets.ModelViewSet 重写权限

class QuestionnaireViewSet(viewsets.ModelViewSet):
    queryset = Questionnaire.objects.filter()
    serializer_class = QuestionnaireSerializer

    filter_backends = (filters.DjangoFilterBackend, filters.SearchFilter, filters.OrderingFilter)

    filter_fields = ("enterprise_id", "owners__id", "category_id", "owner_user_id")
    # 自定义permission_classes_by_action变量,重写get_permissions来给不同的动作设置不同的权限
    permission_classes_by_action = {'default': [StarOrStaffPermission],
                                    'update': [StarOrStaffPermission],
                                    'destroy': [StarOrStaffPermission],
                                    'questionnaire_question_list': [],
                                    'list': [],
                                    'user_questionnaire_list': []
                                    }
    # 重写get_permissions
    def get_permissions(self):
        try:
            # return permission_classes depending on `action`
            return [permission() for permission in self.permission_classes_by_action[self.action]]
        except KeyError:
        	# 没用明确权限的话使用默认权限
            # action is not set return default permission_classes
            return [permission() for permission in self.permission_classes_by_action['default']]

看一下get_permissions()源码:

同样是返回权限列表

    def get_permissions(self):
        """
        Instantiates and returns the list of permissions that this view requires.
        """
        return [permission() for permission in self.permission_classes]

再看一下ModelViewSet的模型混入类组成
官方文档:https://www.django-rest-framework.org/api-guide/generic-views/#mixins

class ModelViewSet(mixins.CreateModelMixin,
                   mixins.RetrieveModelMixin,
                   mixins.UpdateModelMixin,
                   mixins.DestroyModelMixin,
                   mixins.ListModelMixin,
                   GenericViewSet):
    """
    A viewset that provides default `create()`, `retrieve()`, `update()`,
    `partial_update()`, `destroy()` and `list()` actions.
    """
    pass