NEW: Excluded transitions added.

README.md

@@ -79,6 +79,18 @@ class ArticleViewSet(
 
 If `request` parameter is defined as one of transition callable parameters, then request object will be passed to the transition callable.
 
+### Excluded transitions
+To exclude some transitions to be exposed, add transition name to `excluded_transitions` attribute.
+
+```python
+class ArticleViewSet(
+    get_drf_fsm_mixin(Article),
+    viewsets.ModelViewSet,
+):
+    queryset = Article.objects.all()
+    excluded_transitions = ["foo_transition"]
+```
+
 ### Customized response
 
 To have customied response, add transition name to `return_result_of` attribute and return your desired response from your transittion callable.

djangorestframework_fsm/viewset_mixins.py

@@ -21,6 +21,9 @@ def transition_action(self, request, *args, **kwargs):
         if not has_transition_perm(transition_method, self.request.user):
             raise exceptions.PermissionDenied
 
+        if transition_name in self.excluded_transitions:
+            raise exceptions.PermissionDenied
+
         if hasattr(self, 'get_{0}_kwargs'.format(transition_name)):
             transition_kwargs = getattr(self, 'get_{0}_kwargs'.format(transition_name))()
         else:
@@ -68,6 +71,7 @@ def get_drf_fsm_mixin(Model, fieldname='state'):
     class Mixin(object):
         save_after_transition = True
         return_result_of = []
+        excluded_transitions = []
 
         @action(methods=['GET'], detail=True, url_name='possible-transitions', url_path='possible-transitions')
         def possible_transitions(self, request, *args, **kwargs):
@@ -77,7 +81,7 @@ def possible_transitions(self, request, *args, **kwargs):
                     'transitions': [
                         trans.name.replace('_', '-')
                         for trans in getattr(instance, 'get_available_{}_transitions'.format(fieldname))()
-                        if trans.has_perm(instance, request.user)
+                        if trans.has_perm(instance, request.user) and (trans.name not in self.excluded_transitions)
                     ]
                 },
             )