/', views.QuestionDeleteView.as_view()),
12 | ]
--------------------------------------------------------------------------------
/home/views.py:
--------------------------------------------------------------------------------
1 | from rest_framework.views import APIView
2 | from rest_framework.response import Response
3 | from .models import Person, Question
4 | from .serializers import PersonSerializer, QuestionSerializer
5 | from rest_framework.permissions import AllowAny, IsAuthenticated
6 | from rest_framework import status
7 | from permissions import IsOwnerOrReadOnly
8 |
9 |
10 | class Home(APIView):
11 | permission_classes = [IsAuthenticated,]
12 |
13 | def get(self, request):
14 | persons = Person.objects.all()
15 | ser_data = PersonSerializer(instance=persons, many=True)
16 | return Response(data=ser_data.data)
17 |
18 |
19 | class QuestionListView(APIView):
20 | throttle_scope = 'questions'
21 |
22 | def get(self, request):
23 | questions = Question.objects.all()
24 | srz_data = QuestionSerializer(instance=questions, many=True).data
25 | return Response(srz_data, status=status.HTTP_200_OK)
26 |
27 |
28 | class QuestionCreateView(APIView):
29 | """
30 | Create a new question
31 | """
32 | permission_classes = [IsAuthenticated,]
33 | serializer_class = QuestionSerializer
34 |
35 | def post(self, request):
36 | srz_data = QuestionSerializer(data=request.data)
37 | if srz_data.is_valid():
38 | srz_data.save()
39 | return Response(srz_data.data, status=status.HTTP_201_CREATED)
40 | return Response(srz_data.errors, status=status.HTTP_400_BAD_REQUEST)
41 |
42 |
43 | class QuestionUpdateView(APIView):
44 | permission_classes = [IsOwnerOrReadOnly,]
45 |
46 | def put(self, request, pk):
47 | question = Question.objects.get(pk=pk)
48 | self.check_object_permissions(request, question)
49 | srz_data = QuestionSerializer(instance=question, data=request.data, partial=True)
50 | if srz_data.is_valid():
51 | srz_data.save()
52 | return Response(srz_data.data, status=status.HTTP_200_OK)
53 | return Response(srz_data.errors, status=status.HTTP_400_BAD_REQUEST)
54 |
55 |
56 | class QuestionDeleteView(APIView):
57 | permission_classes = [IsOwnerOrReadOnly,]
58 |
59 | def delete(self, request, pk):
60 | question = Question.objects.get(pk=pk)
61 | question.delete()
62 | return Response({'message': 'question deleted'}, status=status.HTTP_200_OK)
63 |
--------------------------------------------------------------------------------
/manage.py:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env python
2 | """Django's command-line utility for administrative tasks."""
3 | import os
4 | import sys
5 |
6 |
7 | def main():
8 | """Run administrative tasks."""
9 | os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'A.settings')
10 | try:
11 | from django.core.management import execute_from_command_line
12 | except ImportError as exc:
13 | raise ImportError(
14 | "Couldn't import Django. Are you sure it's installed and "
15 | "available on your PYTHONPATH environment variable? Did you "
16 | "forget to activate a virtual environment?"
17 | ) from exc
18 | execute_from_command_line(sys.argv)
19 |
20 |
21 | if __name__ == '__main__':
22 | main()
23 |
--------------------------------------------------------------------------------
/permissions.py:
--------------------------------------------------------------------------------
1 | from rest_framework.permissions import BasePermission, SAFE_METHODS
2 |
3 |
4 | class IsOwnerOrReadOnly(BasePermission):
5 | message = 'permission denied, you are not the owner'
6 |
7 | def has_permission(self, request, view):
8 | return request.user.is_authenticated and request.user
9 |
10 | def has_object_permission(self, request, view, obj):
11 | if request.method in SAFE_METHODS:
12 | return True
13 | return obj.user == request.user
--------------------------------------------------------------------------------
/templates/base.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 | Rest
6 |
7 |
14 |
15 |
16 |
17 | {% include 'inc/navbar.html' %}
18 |
19 | {% include 'inc/messages.html' %}
20 | {% block content %} {% endblock %}
21 |
22 |
23 |
24 |
--------------------------------------------------------------------------------
/templates/inc/messages.html:
--------------------------------------------------------------------------------
1 | {% if messages %}
2 |
3 | {% for msg in messages %}
4 | {{ msg }}
5 | {% endfor %}
6 |
7 | {% endif %}
--------------------------------------------------------------------------------
/templates/inc/navbar.html:
--------------------------------------------------------------------------------
1 |
--------------------------------------------------------------------------------