diff --git a/rog/views.py b/rog/views.py index 1fb4742..bcb9bf1 100644 --- a/rog/views.py +++ b/rog/views.py @@ -44,7 +44,13 @@ from rest_framework.response import Response from rest_framework.parsers import JSONParser, MultiPartParser from .serializers import LocationSerializer from django.http import JsonResponse -from rest_framework.permissions import IsAuthenticated +from rest_framework.permissions import IsAuthenticated , AllowAny +# +# AllowAny: 認証なしで誰でもアクセス可能 +# IsAuthenticated: 認証済みユーザーのみアクセス可能 +# IsAdminUser: 管理者のみアクセス可能 +# IsAuthenticatedOrReadOnly: 読み取りは誰でも可能、書き込みは認証済みユーザーのみ可能 + from django.contrib.gis.db.models import Extent, Union from .serializers import TestSerialiser,NewEventSerializer,NewEvent2Serializer, TeamSerializer, NewCategorySerializer,CategorySerializer, EntrySerializer, MemberSerializer, TempUserSerializer, CustomUserSerializer,EntryMemberSerializer,MemberCreationSerializer,EntryCreationSerializer @@ -1300,9 +1306,9 @@ class NewEvent2ViewSet(viewsets.ModelViewSet): GETメソッドは認証不要、その他のメソッドは認証必要 """ if self.action in ['list', 'retrieve']: - permission_classes = [AllowAny] + permission_classes = [permissions.AllowAny] else: - permission_classes = [IsAuthenticated] + permission_classes = [permissions.IsAuthenticated] return [permission() for permission in permission_classes] class NewEvent2ListView(generics.ListAPIView): @@ -1313,12 +1319,12 @@ class NewEvent2ListView(generics.ListAPIView): class NewEventViewSet(viewsets.ModelViewSet): queryset = NewEvent.objects.all() serializer_class = NewEventSerializer - permission_classes = [IsAuthenticated] + permission_classes = [permissions.IsAuthenticated] class NewEventListView(generics.ListAPIView): queryset = NewEvent.objects.all() serializer_class = NewEventSerializer - permission_classes = [IsAuthenticated] + permission_classes = [permissions.IsAuthenticated] @@ -1519,9 +1525,9 @@ class NewCategoryViewSet(viewsets.ModelViewSet): GETメソッドは認証不要、その他のメソッドは認証必要 """ if self.action in ['list', 'retrieve']: - permission_classes = [AllowAny] + permission_classes = [permissions.AllowAny] else: - permission_classes = [IsAuthenticated] + permission_classes = [permissions.IsAuthenticated] return [permission() for permission in permission_classes] @@ -1549,21 +1555,21 @@ class NewCategoryListView(generics.ListAPIView): GETメソッドは認証不要、その他のメソッドは認証必要 """ if self.action in ['list', 'retrieve']: - permission_classes = [AllowAny] + permission_classes = [permissions.AllowAny] else: - permission_classes = [IsAuthenticated] + permission_classes = [permissions.IsAuthenticated] return [permission() for permission in permission_classes] class CategoryViewSet(viewsets.ModelViewSet): queryset = Category.objects.all() serializer_class = CategorySerializer - permission_classes = [IsAuthenticated] + permission_classes = [permissions.IsAuthenticated] class CategoryListView(generics.ListAPIView): queryset = Category.objects.all() serializer_class = CategorySerializer - permission_classes = [IsAuthenticated] + permission_classes = [permissions.IsAuthenticated] ''' def get(self, request):