Django DRF 获取自定义装饰器中的请求查询参数，应用于viewsets.ViewSet中的function

Question

在 django rest 框架中创建自定义视图集时，我们可以在该视图集中的特定 function 上应用自定义装饰器吗？

class UserViewSet(viewsets.ViewSet):
    """
    Example empty viewset demonstrating the standard
    actions that will be handled by a router class.

    If you're using format suffixes, make sure to also include
    the `format=None` keyword argument for each action.
    """

    @permission_classes([IsAuthenticated])
    @custom_decorator_1()
    def list(self, request):
        pass

    @custom_decorator_2()
    def create(self, request):
        pass

    @custom_decorator_3()
    def retrieve(self, request, pk=None):
        pass

    def update(self, request, pk=None):
        pass

    def partial_update(self, request, pk=None):
        pass

    def destroy(self, request, pk=None):
        pass

如果是，那么我们如何在 ViewSet 上应用的自定义装饰器中获取查询参数？ 或者是否有任何替代解决方案可以实现这一点，我可以在 ViewSet 操作上应用多个装饰器？

现在我正在尝试以这种方式做到这一点：

def custom_decorator():
    """
    Decorator for views that checks that the user passes the given test,
    redirecting to the log-in page if necessary. The test should be a callable
    that takes the user object and returns True if the user passes.
    """

    def decorator(view_func):
        @wraps(view_func)
        def wrapper(request, *args, **kwargs):

            role = request.query_params['role']
            
            return view_func(request, *args, **kwargs)

        return wrapper

    return decorator

收到错误：

AttributeError: 'UserViewSet' object 没有属性 'query_params'

Answer 1

Django 提供了一种在基于 class 的视图上使用装饰器的简单方法（这也适用于 DRF）：

from django.utils.decorators import method_decorator

@method_decorator(login_required) #replace login_required with your own decorator
    def list(self, request):
        pass

更多信息： https://docs.djangoproject.com/en/3.1/topics/class-based-views/intro/#decorating-the-class

但在你的情况下，我宁愿 go 用于 DRF 自己的权限系统（ https://www.django-rest-framework.org/api-guide/permissions/ ）

from rest_framework import permissions

class CustomerAccessPermission(permissions.BasePermission):
    def has_permission(self, request, view):
        return request.query_params['role'] == "admin" #or whatever as long as it is a boolean