我可以在 django rest 框架的 has_permission 方法中获取 cookie 值或会话值吗？

Question

我正在做一个项目，我必须检查用户是否属于公司，或者 not.i 我已经在登录用户时进行了检查。我如何在 has_permission() 方法中使用公司 ID？

class IsCompanyEmployee(permissions.BasePermission):
    message = 'You are unauthorized to perform any action on this company.'

    def has_permission(self, request, view):
        if request.user.is_authenticated():
            if request.user.is_superuser:
                return True
            else:
                #company_id = request.COOKIES["company_id"]
                             #or
                #company_id = request.session["company_id"]
                return request.user.companyemployee_set.filter(company__id=company_id).exists()
        else:
            return False

Answer 1

class IsCompanyEmployee(permissions.BasePermission):

    message = 'You are unauthorized to perform any action on this company.'

    def has_permission(self, request, view):
        if request.user.is_authenticated():
            if request.user.is_superuser:
                return True
            else:
                if 'company_id' in request.session:
                    company_id = request.session.get('company_id')
                    return request.user.companyemployee_set.filter(company__id=company_id).exists()
                else:
                    return False
        else:
            return False

我可以在 django rest 框架的 has_permission 方法中获取 cookie 值或会话值吗？

Can I get cookies value or session value inside the has_permission method of django rest framework?

django

django-rest-framework

setcookie

django-sessions

django-permissions