from rest_framework.permissions import BasePermission class IsSuperUser(BasePermission): """ Allows access only to active superusers. """ def has_permission(self, request, view): return bool( request.user and request.user.is_authenticated and request.user.is_active and request.user.is_superuser )