Chapter 6
Adding Authentication to an API with Django
Section 3
Creating a Customized Permission Class for Object-Level Permissions
We will use the new permission class to ensure that only the game owners can make changes to an existing game. We will combine the first permission class with the second permission class that only allows read-only access to resources when the request is not authenticated as a user. - Create a new Python named permission.py - Navigate user-related views - Define root URL configuration