PYTHON

Action based permissions in Django Rest V3+

class ActivityViewSet(viewsets.ModelViewSet):
  queryset = Activity.objects.all()
  serializer_class = ActivitySerializer

  def get_permissions(self):
      """Set custom permissions for each action."""
      if self.action in ['update', 'partial_update', 'destroy', 'list']:
          self.permission_classes = [IsAuthenticated, ]
      elif self.action in ['create']:
          self.permission_classes = [AllowAny, ]
      return super().get_permissions()

creating custom permissions in django

class USCitizen(models.Model):
    # ...
    class Meta:
        permissions = (
            ("can_drive", "Can drive"),
            ("can_vote", "Can vote in elections"),
            ("can_drink", "Can drink alcohol"),
        )