jperelli · September 8, 2015 11:51 · Sep 8, 2015
diff --git a/README.md b/README.md
@@ -0,0 +1,12 @@
+# Usage
+
+<pre>
+class SomeViewSet(viewsets.ModelViewSet):
+    queryset = models.Some.objects.all()
+    serializer_class = SomeSerializer
+
+    @detail_route(methods=['post'])
+    @route_permissions('some_app.some_permission')
+    def custom_method(self, request, pk=None):
+      return Response(...)
+</pre>
diff --git a/decorator.py b/decorator.py
@@ -0,0 +1,12 @@
+from rest_framework.exceptions import PermissionDenied
+
+def route_permissions(permission):
+    """ django-rest-framework permission decorator for custom methods """
+    def decorator(drf_custom_method):
+        def _decorator(self, *args, **kwargs):
+            if self.request.user.has_perm(permission):
+                return drf_custom_method(self, *args, **kwargs)
+            else:
+                raise PermissionDenied()
+        return _decorator
+    return decorator