Decorator to easily add permission requirements to a custom method in a viewset in django-rest-framework

README.md

Usage

class SomeViewSet(viewsets.ModelViewSet):
    queryset = models.Some.objects.all()
    serializer_class = SomeSerializer

    @detail_route(methods=['post'])
    @route_permissions('some_app.some_permission')
    def custom_method(self, request, pk=None):
      return Response(...)

decorator.py

from rest_framework.exceptions import PermissionDenied

def route_permissions(permission):
    """ django-rest-framework permission decorator for custom methods """
    def decorator(drf_custom_method):
        def _decorator(self, *args, **kwargs):
            if self.request.user.has_perm(permission):
                return drf_custom_method(self, *args, **kwargs)
            else:
                raise PermissionDenied()
        return _decorator
    return decorator