我想根据成员包检查user.profile是否具有查看所有利益对象的权限。（如果用户没有访问权限，则他应该能够看到对象的某些字段（名称和包）

如果用户具有memberpackagePackage1并正在查看中的权益，则Package1他应该能够看到该body字段。如果用户具有memberpackage，则Package2他应该看不到该body字段。

这可能吗？也许这可以通过templatetag来完成？{% if user_has_access_to_benfit %}它会返回true或false。

像这样的东西：

{{ object.name }}

{% if user_has_access_to_benfit %}
    {{ object.body }}
{% else %}
    <p>Sorry! You don't have access to this object.</p>
{% endif %}

--

这是我根据答案尝试过的方法：

class Profile(models.Model):
    user = models.OneToOneField(User)
    memberpackage = models.ForeignKey(Package, blank=True, null=True)



class Package(models.Model):
    name = models.CharField(max_length=200)    

class Benefit(models.Model):
    PUBLISHED = 'P'
    DRAFT = 'U'
    PULLED = 'X'
    name = models.CharField(max_length=200)
    body = models.TextField(blank=True, null=True, help_text="Only visible to those members in the same memberpackage")    
    package = models.ManyToManyField(Package, blank=True, null=True, related_name="in_package")
    status = models.CharField(max_length=1, choices=STATUS_CHOICES, default=DRAFT)    



    def is_viewable_by(self, user):
        return self.package.filter(id=user.profile.memberpackage_id).exists()                

编辑：

如果我这样做（受益方为B资本）

#View for listing one benefit
class BenefitDetailView(DetailView):

    template_name_field = 'template_name'

    model = Benefit        

    queryset = Benefit.objects.exclude(status="X")


    def get(self, request, *args, **kwargs):
        if request.user.is_authenticated():
            context['user_has_access_to_benfit'] = Benefit.is_viewable_by(request.user)

我收到此错误：

unbound method is_viewable_by() must be called with Benefit instance as first argument (got User instance instead)

编辑2：

尝试另一种方式

#View for listing one benefit
class BenefitDetailView(DetailView):

    template_name_field = 'template_name'

    model = Benefit

    queryset = Benefit.objects.exclude(status="X")


    def get(self, request, *args, **kwargs):
        if request.user.is_authenticated():
            user_has_access_to_benfit = Benefit.objects.filter(package = request.user.profile.memberpackage).exists() #Hoping this function returns true or false
        #The user is not logged in, user_has_access_to_benfit should be set to False
        else:
            user_has_access_to_benfit = False

    def get_context_data(self, **kwargs):
        # Call the base implementation first to get a context
        context = super(BenefitDetailView, self).get_context_data(**kwargs)
        # Add in a extra context
        context['user_has_access_to_benfit'] = user_has_access_to_benfit
        return context

但是我得到了错误： The view app.views.BenefitDetailView didn't return an HttpResponse object.

不知道是否有另一种进入request.user.is_authenticated()DetailView的方法吗？