test for csrf

tutorial/views/admin.py

@@ -1,17 +1,17 @@
 from rest_framework import viewsets, permissions
-from account.decorators import super_admin_required
 from ..models import Tutorial
 from ..serializers import TutorialSerializer
 
+
+class IsSuperAdminUser(permissions.BasePermission):
+    def has_permission(self, request, view):
+        return bool(request.user and request.user.is_super_admin())
+
+
 class AdminTutorialViewSet(viewsets.ModelViewSet):
     queryset = Tutorial.objects.all()
     serializer_class = TutorialSerializer
-    permission_classes = [permissions.IsAuthenticated]
-
-    def get_permissions(self):
-        if self.action in ['create', 'update', 'partial_update', 'destroy']:
-            return [super_admin_required()]
-        return [permissions.AllowAny()]
+    permission_classes = [IsSuperAdminUser]
 
     def perform_create(self, serializer):
         serializer.save(created_by=self.request.user)