Django rest framework permission權限

1.utils檔案中的permissions.py:

from rest_framework.permissions import BasePermission


class MyPermission(BasePermission):
    message="vip3是才可以通路"
    def has_permission(self, request, view):
        if request.user.user_type !=3:
            return False
        return True


class MyPermission1(BasePermission):
    message = "vip3不可以通路"
    def has_permission(self, request, view):
        if request.user.user_type == 3:
            return False
        return True
           

2.settings.pu檔案全局權限驗證：

REST_FRAMEWORK = {
    'DEFAULT_PERMISSION_CLASSES':['utils.permissions.MyPermission','utils.permissions.MyPermission1']
}
           

3.view.py中的權限驗證：

class GoodsView(APIView):
    permission_classes = [MyPermission, ]
    def get(self,request, *args, **kwargs):
        ...