views.py 文件源码

def post(self, request, pk):
        with transaction.atomic():
            user = User.objects.select_for_update().get(pk=pk)
            if self.request.user.privilege == Privilege.ROOT:
                if user.privilege == 'user':
                    user.privilege = 'volunteer'
                elif user.privilege == 'volunteer':
                    user.privilege = 'admin'
                elif user.privilege == 'admin':
                    user.privilege = 'user'
            elif self.request.user.privilege == Privilege.ADMIN:
                if user.privilege == 'user':
                    user.privilege = 'volunteer'
                elif user.privilege == 'volunteer':
                    user.privilege = 'user'
            user.save()
        return HttpResponse(json.dumps({'result': 'success'}))