Creating a Django group to limit who can create competitions

[the1mag]

Hi,
I am trying to create a django group with permissions to create competitions so that users would need to be added to this group by administrators before they can create competitions. I want regular authenticated users to not have the permission to create competitions. I have tried implementing this by creating a new permission class IsCompetitionCreator similar to the existing IsOrganizationEditor permission in src/apps/api/permissions.py. Then I changed this file src/apps/api/views/competitions.py to use: if self.action in ['create']: self.permission_classes = [IsCompetitionCreator], instead of using [IsAuthenticated]. I made sure to restart django and run the migration, however, when I test by creating a new user, I see that they still have permissions to create competitions. I also see on the django site administration, that every user shows the Competition Creator group, but I checked that the group was actually empty. Is there a better way I can go about creating this group, or do you guys have any idea why this method is not working?

Thanks

[ObadaS]

Related to #2215

[the1mag]

Hi,

I looked at your implementation of the COMPETITION_CREATOR_GROUP and saw that if a user is not in that group, then the upload and create buttons will not show up for them. We instead chose to show the buttons for all users but if a non competition creator clicked on one of them, it would take them to a 403 error page. We thought a 403 error page would be more informative than hiding the buttons so that users are aware that competition creators are a thing (if they want to be added to the group).
Just an idea if that is of interest to you guys!