permissions.py
Permissions TokenHasReadWriteScopeThis permission class is intended for use with either of the OAuthAuthentication
and OAuth2Authentication
classes, and ties into the scoping that their backends provide.
Requests with a safe methods of GET
, OPTIONS
or HEAD
will be allowed if the authenticated token has read permission.
Requests for POST
, PUT
, PATCH
and DELETE
will be allowed if the authenticated token has write permission.
This permission class relies on the implementations of the django-oauth-plus and django-oauth2-provider libraries, which both provide limited support for controlling the scope of access tokens:
django-oauth-plus
: Tokens are associated with a Resource
class which has a name
, url
and is_readonly
properties.django-oauth2-provider
: Tokens are associated with a bitwise scope
attribute, that defaults to providing bitwise values for read
and/or write
.If you require more advanced scoping for your API, such as restricting tokens to accessing a subset of functionality of your API then you will need to provide a custom permission class. See the source of the django-oauth-plus
or django-oauth2-provider
package for more details on scoping token access.
From here you can search these documents. Enter your search terms below.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4