drf中根据不同的action分发不同的权限

drf.get_permissions.py

class WhiteListViewSet(ModelViewSet):
    queryset = WhiteList.objects.all()
    serializer_class = WhiteListSerializer
    permission_classes = [IsAdminUser]
    pagination_class = None

    def get_permissions(self):
        """
        根据不同的action获取不同的权限校验中间件
        """
        if self.action == 'retrieve' or self.action == 'list':
            permission_classes = []
        else:
            permission_classes = [IsAdminUser]
        return [permission() for permission in permission_classes]