Make permissions work.

Author: dpage

django_react/permissions.py

@@ -0,0 +1,13 @@
+from rest_framework.permissions import DjangoModelPermissions
+
+
+class DrDjangoModelPermissions(DjangoModelPermissions):
+    perms_map = {
+        'GET':['%(app_label)s.view_%(model_name)s'],
+        'OPTIONS': [],
+        'HEAD': [],
+        'POST': ['%(app_label)s.add_%(model_name)s'],
+        'PUT': ['%(app_label)s.change_%(model_name)s'],
+        'PATCH': ['%(app_label)s.change_%(model_name)s'],
+        'DELETE': ['%(app_label)s.delete_%(model_name)s'],
+    }

django_react/settings.py

@@ -137,5 +137,8 @@
 REST_FRAMEWORK = {
     'DEFAULT_AUTHENTICATION_CLASSES': [
         'rest_framework.authentication.SessionAuthentication',
+    ],
+    'DEFAULT_PERMISSION_CLASSES': [
+       'rest_framework.permissions.DjangoModelPermissions',
     ]
 }

leads/views.py

@@ -1,12 +1,11 @@
 from .models import Lead
 from .serializers import LeadSerializer
 from rest_framework import generics
-from rest_framework import permissions
+from django_react.permissions import DrDjangoModelPermissions
 
 
 class LeadListCreate(generics.ListCreateAPIView):
-    permission_classes = [permissions.IsAuthenticated]
-
     queryset = Lead.objects.all()
     serializer_class = LeadSerializer
+    permission_classes = [DrDjangoModelPermissions]