mirror of https://github.com/jumpserver/jumpserver
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
22 lines
631 B
22 lines
631 B
from rest_framework import permissions |
|
|
|
from .utils import is_auth_password_time_valid |
|
|
|
|
|
class IsAuthPasswdTimeValid(permissions.IsAuthenticated): |
|
|
|
def has_permission(self, request, view): |
|
return super().has_permission(request, view) \ |
|
and is_auth_password_time_valid(request.session) |
|
|
|
|
|
class UserObjectPermission(permissions.IsAuthenticated): |
|
|
|
def has_object_permission(self, request, view, obj): |
|
if view.action not in ['update', 'partial_update', 'destroy']: |
|
return True |
|
|
|
if not request.user.is_superuser and obj.is_superuser: |
|
return False |
|
|
|
return True
|
|
|