Added custom permission class to members rest api

members/permissions.py

@@ -0,0 +1,11 @@
+from rest_framework import permissions
+from django.contrib.auth.models import Permission, User
+
+class HasRights(permissions.BasePermission):
+    message = "You need rights to access this content."
+
+    def has_permission(self, request, view):
+        if request.user.has_perm('members.change_member'):
+            return True
+        else:
+            return False

members/throttles.py

@@ -0,0 +1,7 @@
+from rest_framework.throttling import UserRateThrottle
+
+class BurstRateThrottle(UserRateThrottle):
+    scope = 'burst'
+
+class SustainedRateThrottle(UserRateThrottle):
+    scope = 'sustained'

members/views.py

@@ -16,6 +16,8 @@ from rest_framework import generics
 from rest_framework import generics, status, authentication, exceptions, permissions
 from rest_framework.decorators import api_view, permission_classes
 from rest_framework.permissions import IsAuthenticated
+from members.permissions import HasRights
+from members.throttles import BurstRateThrottle, SustainedRateThrottle
 
 # Logger function, you can use the same idea when implementing other loggers to other apps
 memberlogger = logging.getLogger(__name__)
@@ -27,13 +29,15 @@ logging.basicConfig(format='[%(levelname)s]%(asctime)s %(message)s', level=setti
 class MembersList(generics.ListCreateAPIView):
     queryset = Member.objects.all()
     serializer_class = MemberSerializer
-    permission_classes = (permissions.IsAuthenticated, )
+    permission_classes = (HasRights, permissions.IsAuthenticated, )
+    throttle_classes = (BurstRateThrottle, SustainedRateThrottle, )
 
 
 class MemberDetails(generics.RetrieveUpdateDestroyAPIView):
     queryset = Member.objects.all()
     serializer_class = MemberSerializer
-    permission_classes = (permissions.IsAuthenticated, )
+    permission_classes = (HasRights, permissions.IsAuthenticated, )
+    throttle_classes = (BurstRateThrottle, SustainedRateThrottle, )
 
 ########################################
 # function to validate reCaptcha