feat: add IsAdministrator permission and protect admin endpoints

2026-03-14 16:37:44 -05:00
parent 7e2c03c81b
commit 0d5a34d366
2 changed files with 23 additions and 0 deletions
--- a/tienda_ilusion/don_confiao/permissions.py
+++ b/tienda_ilusion/don_confiao/permissions.py
@@ -0,0 +1,6 @@
+from rest_framework.permissions import BasePermission
+
+
+class IsAdministrator(BasePermission):
+    def has_permission(self, request, view):
+        return request.user and request.user.is_staff