django-rest-framework - 如何将权限类应用于 Django-Rest Framework 中基于类的 View 中的特定方法？

Question

我只想为“PUT”方法而不是“POST”申请权限

class Signup(APIView):
    def post(self, request, format=None):
        something...something

    @authentication_classes((ExpiringTokenAuthentication,))
    @permission_classes((IsAuthenticated,))
    def put(self, request, format=None):
        something...something

Answer 1

检查您的权限类 has_permission 方法上的 HTTP 方法，如果它是 PUT 则应用您的检查:

class ExpiringTokenAuthentication(permissions.BasePermission):

    def has_permission(self, request, view):
        if request.method == 'PUT':
           # do it here


class Signup(APIView):
    permission_classes = (BlacklistPermission,)