How to Use Django REST Framework Permissions

This video demonstrates how to use permissions in the Django REST Framework to restrict access to API endpoints.
WORK WITH ME👇🏼
✅ Implement features and fix bugs in your app: Live, one-on-one screenshare
prettyprinted....
💻 Code written in video
prettyprinted....
Join my free course on building a Todo API with Django REST Framework: prettyprinted....
Check out my free Django database course: prettyprinted....

[@prettyprinted]

Join my free course on building a Todo API with Django REST Framework: prettyprinted.com/djangotodoapi

[@islamimankhodzhaev543]

Wow, you are golden spring for django learners.

[@rajat1548]

Thank you so much sir, you are insane in teaching and making things really simplified.

[@TeppopucT]

I love You! My English is not very good, but your order of telling about any technology is excellent! I understand all of your videos. Thx very much! Good luck!

[@prettyprinted]

You're welcome! Thanks for watching.

[@kadrogo601]

You are my GOD!! thank you for your amazing lectures!

[@nareshk7481]

No words to say about Explanation. Really Great video, thanks for proving this much valuable videos for us.

[@bpospanov]

GOD. You are a freaking genius. Respect from Kazakhstan

[@anthonysilva4406]

You are the man. Thanks for the video, really helpful

[@ajborbzzz]

This video really helps me a lot in understanding Django Rest Permissions. Thank you

[@Aaam1rK]

Really nice explanations of DRF. Hoping to see a complete comprehensive series (perhaps paid?) that covers advanced DRF concepts from you!

[@prettyprinted]

I'll definitely consider it.

[@geoafrikana]

Thanks for the explanation.

[@ekbergpeter6987]

Is it possible to give permissions depending on what is set in admin for users? Do You have any tutorial on this. I like the way you explain things here.

[@hassanibrahim8732]

Great video. I’d love for you to make a video on how to use Django REST with ReactJS and how to configure both their routers with each other.

[@grijeshmnit]

Very helpful tutorial. Thanks

[@davidmutua6971]

I came accross your django rest_framework videos on youtube as I found myself in need to expose some of my models as END POINTS and be able to use AJAX and to Prefill Dropdowns along with JavaScript Events on my UI. I believed this could solve my needs explained above when you posted on Postman and it worked. Did the same but on Insomnia and voila!!! The only issue is that I am using django rest_framework 3.10.1 and it doesn't work with HyperlinkedModelSerializer. Instead it throws an ImproperlyConfigured Exceptions. Thank You Sir. Tony.

[@prettyprinted]

You're welcome! Thanks for watching!

[@mdk124]

Thank you for making this series of videos man. How should I proceed if I want to use my own custom users to login instead of the model provided by Django? Is there a video I can look at?

[@0xcoder542]

Excellent work! Great videos you have created for Django and Python. I have a quick question here for you is regarding the permissions in Django Rest Framework API. The login credentials that you used for the demo where does it comes from? Can I just use the login that I created in Django admin site? Your response is much appreciated. Thanks in advanced.

[@jorgedavalos5663]

Hello there! great tutorials. would you do the authentication one eventually?

[@BeLKa4444]

Thank you SO much for this video! Really. Thanks.

[@prettyprinted]

You're welcome! Thanks for watching.

[@sairampanguluri888]

Can you explain in detail about list of models like foreignkey, types of serializers, types of viewsets and their function like what did they actually do?

[@cvcarter929]

This is a nice tutorial! Thanks! Are you planning to do one on object-level permissions?

[@prettyprinted]

Possibly. If I do a more complete series on DRF on my website, then I'll cover object-level permissions.

[@estebanmejia9989]

thanks, it helped me a lot

[@kiranpaithane3278]

Hello, in my case log-in is not going to enable, i do follow all steps done by you. kindly help me. thanks in advance.♥

[@Mostaqmahmud]

Thanks man. I want to know about the group based permission which you mentioned in the end of video. It's very emergency for me now for my current project. Can you please make a video asap(if possible) or can give me any reference ?

[@prettyprinted]

I don't plan on making a video on it anytime soon, but here are the docs: www.django-rest-framework.org/api-guide/authentication/

[@ryan.aquino]

Hi , have you found any solution on this? django rest framework docs seems to be complex to implement

[@MS-ph2ol]

You rock!

[@serhii.chumachenko]

Nice job! Thanks!

[@orlandog1979]

Thanks bro....

[@satishkurakula]

Hi I need a small help from you, by using the rest APIs can I only restrict the user to edit and only the admin user to add or delete the users in the user list.

[@VIJENDRASINGH-zg2lp]

Hi Anthony, I'm using Email instead of Username for user registration. When i try to login using Email and Password, it just doesn't . Can you please guide?

[@ThaEzioAuditore]

Completely unrelated but I wanted to ask you this : did you study at MIT ? I'm currently going through 6.006 and during one the recitations I think I heard your voice. Would be cool if you did !

[@prettyprinted]

My high school grades weren't good enough for MIT. :\

[@stanleyjohn4670]

When it comes to logging in the credentials before viewing the JSON data, can only an *admin* user log in and view the data or can a random logged in user see/edit it as well? Example, if I was an admin user, I can see the JSON data. That's guaranteed. But what about a user named 'Rick'?. If Rick logs in using a normal login within a template, can he view and edit the api as well if he has access to it?

[@prettyprinted]

It doesn't have to be an admin user. You can have two approaches: allow anyone who is logged in to see all the data. Or you can make it to where only the creator can see their data. This tutorial might help: www.django-rest-framework.org/tutorial/4-authentication-and-permissions/

[@ZeroShrimpy]

are you planning to do React tutorials in future??

[@prettyprinted]

Yeah, I'll cover React eventually.

[@hassanibrahim8732]

@@prettyprinted I’d love it if you could make a video on how to use Django (REST) with ReactJS and how to configure both their routers with each other.

[@xtremehackerzpro9511]

Please cover JWT also :)

[@trung7668]

Do you have the code for that somewhere?

[@snowbord13k]

There is some problem with permissions in views.py. I repeated everything, but it said that there some type error. I spend 1 hour to fix it, but not successful. But when I used that in global settings, everything was working. Thanks for the lessons!:)

[@prettyprinted]

Glad you figured it out.

[@louiejohnseno1810]

thanks man !

[@prettyprinted]

You're welcome!

[@rajshreesome3275]

I am using the JWT for authentication but can we save this tokens in db?

[@prettyprinted]

The client could save the token to the database, yes. It doesn't make sense for the server to save the token.

[@ikhsanabdillah5662]

how to get csrf token ? when i use in frontend, i get some error like this Forbidden (CSRF token missing or incorrect.): /api-auth/login/ [22/Apr/2020 21:44:47] "POST /api-auth/login/?next=/api/ HTTP/1.1" 403 2513

[@mohi7solanki]

Please cover social authentication in DRF if possible.

[@prettyprinted]

Social authentication doesn't make sense with the API. Could you tell me more about what exactly you want to see?

[@nurizzati5892]

@@prettyprinted it's possible to connect with social network? for example validate user credentials in twitter using django ?

[@prettyprinted]

@@nurizzati5892 Yes, look into the all auth library.

[@nurizzati5892]

thank you

[@prettyprinted]

You're welcome!

[@skyblaze6687]

Sir how to apply token on headers :, to make our android app working login it only generate token

[@nikhilbhardwaj6055]

amazing

[@prettyprinted]

Thanks for watching!

[@romko775]

Hey, how to make only readOnly permission, I want that users can make only get requests?

[@prettyprinted]

Try this: www.django-rest-framework.org/api-guide/serializers/#specifying-read-only-fields

[@nguyenhung8195]

Pretty Printed How to specify permissions per method when using class based views.

[@abdulmueez267]

is there a place where i can download the source code?

[@prettyprinted]

Email me at [e-mail] and I'll send it to you.

[@mafirus]

Where is the repo of this tutorial???

[@prettyprinted]

There isn't one because the code is simple. I still have the code though, so if you want it you can email me at [e-mail]

[@tabmax22]

yeah but now the frontend can't make post requests

[@TheArtheanos]

Damn, I've always thought you were white because of your voice