Skip to content

L
library-app-django
Commit 8a53d231 authored by Ilham Maulana's avatar Ilham Maulana 💻
Browse files
Options

fix: book loan permissions

parent 8555ef11
Hide whitespace changes
Inline Side-by-side
Showing with 3 additions and 0 deletions
api/loans/views.py
View file @ 8a53d231
...@@ -5,9 +5,11 @@ from rest_framework.filters import SearchFilter ...@@ -5,9 +5,11 @@ from rest_framework.filters import SearchFilter
from django_filters.rest_framework import DjangoFilterBackend from django_filters.rest_framework import DjangoFilterBackend
from .serializers import BookLoan, BookLoanSerializer, MemberLoanSerializer from .serializers import BookLoan, BookLoanSerializer, MemberLoanSerializer
from ..auth.permissions import IsNotStaffUser, IsStaffUser
class BookLoanViewSet(viewsets.ModelViewSet): class BookLoanViewSet(viewsets.ModelViewSet):
permission_classes = [IsStaffUser]
queryset = BookLoan.objects.all().order_by("loan_date") queryset = BookLoan.objects.all().order_by("loan_date")
serializer_class = BookLoanSerializer serializer_class = BookLoanSerializer
filter_backends = [DjangoFilterBackend, SearchFilter] filter_backends = [DjangoFilterBackend, SearchFilter]
...@@ -49,6 +51,7 @@ class UpComingBookLoanViewSet(BookLoanViewSet): ...@@ -49,6 +51,7 @@ class UpComingBookLoanViewSet(BookLoanViewSet):
class MemberLoanViewSet(BookLoanViewSet): class MemberLoanViewSet(BookLoanViewSet):
permission_classes = [IsNotStaffUser]
queryset = BookLoan.objects.all() queryset = BookLoan.objects.all()
serializer_class = MemberLoanSerializer serializer_class = MemberLoanSerializer
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment