django-rest-framework/examples/permissionsexample/views.py

53 lines
1.5 KiB
Python
Raw Normal View History

from djangorestframework.views import View
from djangorestframework.permissions import PerUserThrottling, IsAuthenticated
2012-02-22 00:47:55 +04:00
from djangorestframework.reverse import reverse
2012-01-24 23:27:18 +04:00
class PermissionsExampleView(View):
"""
A container view for permissions examples.
"""
2011-12-29 17:31:12 +04:00
def get(self, request):
2012-01-24 23:27:18 +04:00
return [
{
'name': 'Throttling Example',
'url': reverse('throttled-resource', request=request)
2012-01-24 23:27:18 +04:00
},
{
'name': 'Logged in example',
'url': reverse('loggedin-resource', request=request)
2012-01-24 23:27:18 +04:00
},
]
2011-12-29 17:31:12 +04:00
class ThrottlingExampleView(View):
"""
A basic read-only View that has a **per-user throttle** of 10 requests per minute.
2011-12-29 17:31:12 +04:00
If a user exceeds the 10 requests limit within a period of one minute, the
throttle will be applied until 60 seconds have passed since the first request.
"""
2011-12-29 17:31:12 +04:00
2012-01-24 23:27:18 +04:00
permissions = (PerUserThrottling,)
throttle = '10/min'
2011-12-29 17:31:12 +04:00
def get(self, request):
"""
Handle GET requests.
"""
return "Successful response to GET request because throttle is not yet active."
2011-12-29 17:31:12 +04:00
2012-01-24 23:27:18 +04:00
class LoggedInExampleView(View):
"""
You can login with **'test', 'test'.** or use curl:
2012-01-24 23:27:18 +04:00
`curl -X GET -H 'Accept: application/json' -u test:test http://localhost:8000/permissions-example`
2012-01-24 23:27:18 +04:00
"""
permissions = (IsAuthenticated, )
2012-01-24 23:27:18 +04:00
def get(self, request):
2012-01-24 23:27:18 +04:00
return 'You have permission to view this resource'