score:1

drf provides permission classes, also if you need some customization you can do so by creating custom permission classes. refer https://www.django-rest-framework.org/api-guide/permissions/#api-reference.

on react side if you are using react router you can guard each route on some roles /permissions received from backend. refer https://hackernoon.com/role-based-authorization-in-react-c70bb7641db4 this might help you


Related Query

More Query from same tag