| Current Path : /var/www/bavspeed/api/core/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : /var/www/bavspeed/api/core/permissions.py |
from rest_framework.permissions import BasePermission
class IsCompanyOwner(BasePermission):
def has_permission(self, request, view):
return request.user.role == 'EMPLOYER'
def has_object_permission(self, request, view, obj):
return obj == request.user.company
class IsEmployeeOwner(BasePermission):
"""Vérifie que l'employé appartient à l'entreprise de l'employeur"""
def has_permission(self, request, view):
return request.user.role in ['EMPLOYER', 'EMPLOYEE']
def has_object_permission(self, request, view, obj):
if request.user.role == 'EMPLOYER':
return obj.company == request.user.company
elif request.user.role == 'EMPLOYEE':
return obj.user == request.user
return False