Django 按组控制权限类及定义方法详解

# 基于函数的控制
@api_view(['GET'])
@permission_groups(['开发组','测试组'])
def api(request):
    return Response()
# 或者在类中
class SomeViewSet():
    group_names = ['开发组','测试组']

class IsAuthenticated(BasePermission):
    def has_permission(self, request, view):
        return bool(request.user and request.user.is_authenticated)

def sigma_permission():
    class SigmaPermission(BasePermission):
        def __init__(self, group_names: List[GroupName] = None):
            self._sigma_groups = group_names
        def has_permission(self, request, view):
            if request.user.is_anonymous:
                return False
            return set(request.user.groups.all().values_list('name', flat=True)) & set(self._sigma_groups)
    return SigmaPermission
# 能够接受参数的权限类 
SigmaPermissionFactory = sigma_permission()

def permission_classes(permission_classes):
    def decorator(func):
        func.permission_classes = permission_classes
        return func
    return decorator

def permission_groups(group_names: List[GroupName]):
    """ 组权限装饰器 """
    def decorator(func):
        groups_permission = SigmaPermissionFactory(group_names)
        if hasattr(func, 'permission_classes') and func.permission_classes is not None:
            func.permission_classes = [*func.permission_classes, lambda: groups_permission]
        else:
            func.permission_classes = [lambda: groups_permission]
        return func
    return decorator

def get_permissions(self):
    permissions = [permission() for permission in self.permission_classes]
    if hasattr(self, 'group_names '):
        groups_permission = SigmaPermissionFactory(self.group_names )
        permissions.append(groups_permission)
    return permissions