# coding=utf-8 from rest_framework import permissions class IsStaff(permissions.BasePermission): def has_permission(self, request, view): if not request.user or not request.user.is_authenticated: return False return request.user.is_staff() class IsAdministrator(permissions.BasePermission): def has_permission(self, request, view): if not request.user or not request.user.is_authenticated: return False return request.user.is_administrator()