from rest_framework.permissions import BasePermission class IsStoreOwner(BasePermission): """Restricts seller-panel endpoints to authenticated users who own a Store.""" message = "شما فروشگاهی ثبت نکرده‌اید." def has_permission(self, request, view): return bool(request.user and request.user.is_authenticated and hasattr(request.user, 'store'))