timofejmalinin 2 years ago
parent 9ce6eb3ca6
commit 13c667fc7d

@ -6,7 +6,7 @@ from django.conf import settings
class UserPermission(BasePermission): class UserPermission(BasePermission):
def has_permission(self, request, view): def has_permission(self, request, view):
kk_profile = request.auth kk_profile = request.auth
kk_roles = kk_profile.get('realm_access', {}).get('roles', []) kk_roles = kk_profile.get('resource_access',{}).get('postnet',{}).get('roles',[])
if request.method not in ['GET']: if request.method not in ['GET']:
# if view.action in [ # if view.action in [
# 'update_fact', 'update_postamat_id', 'update_status', 'retrieve', # 'update_fact', 'update_postamat_id', 'update_status', 'retrieve',

Loading…
Cancel
Save