organization limit for quota - get org childs

apps/pos_device/permissions.py

@@ -0,0 +1,25 @@
+from rest_framework import permissions
+
+
+# example Code
+class AuthorAllStaffAllButEditOrReadOnly(permissions.BasePermission):
+    edit_methods = ("PUT", "PATCH")
+
+    def has_permission(self, request, view):
+        if request.user.is_authenticated:
+            return True
+
+    def has_object_permission(self, request, view, obj):
+        if request.user.is_superuser:
+            return True
+
+        if request.method in permissions.SAFE_METHODS:
+            return True
+
+        if obj.author == request.user:
+            return True
+
+        if request.user.is_staff and request.method not in self.edit_methods:
+            return True
+
+        return False