Merge pull request #308 from PROCOLLAB-github/permissions_fox

permissions fix

Author: sh1nkey

project_rates/views.py

@@ -15,14 +15,14 @@
     ProjectScoreGetSerializer,
     serialize_data_func,
 )
-from users.permissions import IsExpert
+from users.permissions import IsExpert, IsExpertPost
 
 User = get_user_model()
 
 
 class RateProject(generics.CreateAPIView):
     serializer_class = ProjectScoreCreateSerializer
-    permission_classes = [IsExpert]
+    permission_classes = [IsExpertPost]
 
     def create(self, request, *args, **kwargs):
         # try:

users/permissions.py

@@ -29,3 +29,12 @@ def has_permission(self, request, view):
         if not Expert.objects.filter(programs__id=program_id, user=user).exists():
             raise PermissionDenied("You don't have permission to rate this program")
         return True
+
+
+class IsExpertPost(BasePermission):
+    """
+    Allows access if user is EXPERT
+    """
+
+    def has_permission(self, request, view):
+        return True if request.user.user_type == 3 else False