ModelViewSet -选择性地隐藏字段

Question

我有一个Instructor模型，它有一个Client模型的多对多字段。(Instructor.clients)

模型:

  class InstructorProfile(models.Model):
    '''Instructor specific profile attributes
    '''
    # Fields
    office_number = models.CharField(max_length=30, blank=True, null=True)
    location = models.CharField(max_length=30)
    last_updated = models.DateTimeField(auto_now=True, editable=False)
    # Relationship Fields
    user = models.OneToOneField(settings.AUTH_USER_MODEL,
                                related_name="instructor_profile",
                                on_delete=models.CASCADE)
    clients = models.ManyToManyField('ClientProfile', blank=True)

我的序列化器当前是:

class InstructorProfileSerializer(serializers.ModelSerializer):
    class Meta:
        model = models.InstructorProfile
        fields = '__all__'

和viewset:

class InstructorProfileViewSet(viewsets.ModelViewSet):
    """ViewSet for the InstructorProfile class"""
    queryset = models.InstructorProfile.objects.all()
    serializer_class = serializers.InstructorProfileSerializer
    permission_classes = [permissions.IsAuthenticated]

我想阻止每个人访问clients字段，除了Instructor所属的用户(在Instructor.user模型字段中可用)。

我怎样才能做到这一点?

Answer 1

将此添加到您的InstructorProfileViewSet:

...
def get_queryset(self):
    if hasattr(self.request.user, 'instructor_profile'):
        return models.InstructorProfile.objects.filter(user=self.request.user)
    else:
        return models.InstructorProfile.objects.none()

…如果我猜对了你的InstructorProfile模型

Answer 2

这样做的一种方法是更改list方法以在需要的地方设置client=None。这样就可以保留响应结构。它应该是这样的:

def list(self, request, *args, **kwargs):
    queryset = self.filter_queryset(self.get_queryset())
    page = self.paginate_queryset(queryset)
    if page is not None:
        serializer = self.get_serializer(page, many=True)
        return self.get_paginated_response(serializer.data)
    serializer = self.get_serializer(queryset, many=True)
    for i in serializer.data:
      if i['user'] != request.user.pk:
         i['client'] = None
    return Response(serializer.data)