"""Reusable permission classes."""

from __future__ import annotations

from rest_framework.permissions import SAFE_METHODS, BasePermission


class IsAdminRole(BasePermission):
    """Only users with the ADMIN role (or Django superusers)."""

    message = "This action requires the admin role."

    def has_permission(self, request, view) -> bool:  # noqa: ANN001, ARG002
        user = request.user
        return bool(user and user.is_authenticated and user.is_admin_role)


class ReadOnly(BasePermission):
    def has_permission(self, request, view) -> bool:  # noqa: ANN001, ARG002
        return request.method in SAFE_METHODS