mirror of
https://github.com/encode/django-rest-framework.git
synced 2024-12-01 05:54:01 +03:00
reword error message when user not logged in; add request to permission (so we can check permissions based on the type of request)
This commit is contained in:
parent
68487c846b
commit
f71f3aa422
|
@ -388,6 +388,7 @@ class AuthMixin(object):
|
|||
user = self.user
|
||||
for permission_cls in self.permissions:
|
||||
permission = permission_cls(self)
|
||||
permission.request = self.request
|
||||
permission.check_permission(user)
|
||||
|
||||
|
||||
|
|
|
@ -26,6 +26,10 @@ _403_FORBIDDEN_RESPONSE = ErrorResponse(
|
|||
{'detail': 'You do not have permission to access this resource. ' +
|
||||
'You may need to login or otherwise authenticate the request.'})
|
||||
|
||||
_403_NOT_LOGGED_IN_RESPONSE = ErrorResponse(
|
||||
status.HTTP_403_FORBIDDEN,
|
||||
{'detail': 'You need to login to access this resource.'})
|
||||
|
||||
_503_SERVICE_UNAVAILABLE = ErrorResponse(
|
||||
status.HTTP_503_SERVICE_UNAVAILABLE,
|
||||
{'detail': 'request was throttled'})
|
||||
|
@ -64,7 +68,7 @@ class IsAuthenticated(BasePermission):
|
|||
|
||||
def check_permission(self, user):
|
||||
if not user.is_authenticated():
|
||||
raise _403_FORBIDDEN_RESPONSE
|
||||
raise _403_NOT_LOGGED_IN_RESPONSE
|
||||
|
||||
|
||||
class IsAdminUser(BasePermission):
|
||||
|
|
Loading…
Reference in New Issue
Block a user