I have the following code, that was working fine in Django 1.2.5:
from django.views.decorators.csrf import csrf_exempt class ApiView(object): def __call__(s
csrf_exempt has to decorate a function. In your urls you can decorate a that function, docs can be found here.
(r'^vote/', permission_required('polls.can_vote')(VoteView.as_view())),