from rest_framework.permissions import BasePermission class IsStaff(BasePermission): def has_permission(self, request, view): if request.user.is_superuser or request.user.is_staff: return True return False