如何限制非登录用户访问api数据

Question

这里是permissions.py

from rest_framework import permissions
from rest_framework.permissions import BasePermission, SAFE_METHODS


class ReadOnly(permissions.BasePermission):
    

    def has_permission(self, request, view):
        return request.method in SAFE_METHODS

如何修改它以便只有登录的用户才能访问数据

Answer 1

将您的 permissions.py 修改为

from rest_framework import permissions
from rest_framework.permissions import BasePermission, IsAuthenticated, SAFE_METHODS




class ReadOnly(permissions.BasePermission):
    permission_classes = [IsAuthenticated] #new

    def has_permission(self, request, view):
        return request.method in SAFE_METHODS

剩下的就做你想做的