user42488
user42488

Reputation: 1465

django REST framework - limited queryset for nested ModelSerializer based on requesting user

How can I limit a the queryset of a related field with custom model serialiser based on the request user? I have implemented this with a SerializerMethodField, but it seems not the best solution:

class TourSerializer(serializers.ModelSerializer):
   """
   Returns a list of tour objects.
   """

   orders = serializers.SerializerMethodField()

   class Meta:
      model = Tour
      fields = (
         'id', 'orders'
       )

   def get_orders(self, obj):
       orders = Order.objects.visible_for_me(self.context['request'].user).filter(tour=obj)
       serializer = OrderSerializer(orders, many=True)
       return serializer.data

Upvotes: 2

Views: 837

Answers (1)

zaidfazil
zaidfazil

Reputation: 9245

You could override the __init__() method of your serializer:

class YourModelSerializer(serializers.ModelSerializer):
    .....
    .....

    def __init__(self, *args, **kwargs):
        super(YourModelSerializer, self).__init__(*args, **kwargs)
        user = self.context['request'].user
        # Limit according to your need, whatever. 
        self.fields['field_name'].queryset = Model.objects.filter(user=user)

Upvotes: 1

Related Questions