diff --git a/djadmin2/permissions.py b/djadmin2/permissions.py index ed23e8c..74420b7 100644 --- a/djadmin2/permissions.py +++ b/djadmin2/permissions.py @@ -114,6 +114,16 @@ class IsStaffPermission(BasePermission): is_staff) +class IsSuperuserPermission(BasePermission): + ''' + It ensures that the user is authenticated and is a superuser. However it + does not check if the user is a staff member. + ''' + permissions = ( + is_authenticated, + is_superuser) + + # TODO: needs documentation # TODO: needs integration into the REST API class ModelPermission(BasePermission): diff --git a/docs/reference.rst b/docs/reference.rst index 7d994a1..c875fe5 100644 --- a/docs/reference.rst +++ b/docs/reference.rst @@ -70,6 +70,8 @@ You can use the following permission classes directly in you views. .. autoclass:: djadmin2.permissions.IsStaffPermission +.. autoclass:: djadmin2.permissions.IsSuperuserPermission + .. autoclass:: djadmin2.permissions.ModelViewPermission .. autoclass:: djadmin2.permissions.ModelAddPermission