mirror of
https://github.com/jazzband/django-authority.git
synced 2026-03-16 22:20:28 +00:00
91929a76c9
1. All models need to be defined inside an installed application or declare an explicit app_label. Furthermore, it isn’t possible to import them before their application is loaded. In particular, it isn’t possible to import models inside the root package of an application 2. The django.contrib.contenttypes.generic module is removed 3. django.db.models.loading is removed.
105 lines
4 KiB
Python
105 lines
4 KiB
Python
from django import forms
|
|
from django.utils.translation import ugettext_lazy as _
|
|
from django.contrib.contenttypes.models import ContentType
|
|
from django.contrib.auth.models import Group
|
|
from django.utils.safestring import mark_safe
|
|
|
|
from authority import permissions
|
|
from authority.utils import get_choices_for
|
|
from authority.models import Permission
|
|
from authority.compat import get_user_model
|
|
|
|
|
|
User = get_user_model()
|
|
|
|
|
|
class BasePermissionForm(forms.ModelForm):
|
|
codename = forms.CharField(label=_('Permission'))
|
|
|
|
class Meta:
|
|
model = Permission
|
|
exclude = []
|
|
|
|
def __init__(self, perm=None, obj=None, approved=False, *args, **kwargs):
|
|
self.perm = perm
|
|
self.obj = obj
|
|
self.approved = approved
|
|
if obj and perm:
|
|
self.base_fields['codename'].widget = forms.HiddenInput()
|
|
elif obj and (not perm or not approved):
|
|
perms = get_choices_for(self.obj)
|
|
self.base_fields['codename'].widget = forms.Select(choices=perms)
|
|
super(BasePermissionForm, self).__init__(*args, **kwargs)
|
|
|
|
def save(self, request, commit=True, *args, **kwargs):
|
|
self.instance.creator = request.user
|
|
self.instance.content_type = ContentType.objects.get_for_model(self.obj)
|
|
self.instance.object_id = self.obj.id
|
|
self.instance.codename = self.perm
|
|
self.instance.approved = self.approved
|
|
return super(BasePermissionForm, self).save(commit)
|
|
|
|
|
|
class UserPermissionForm(BasePermissionForm):
|
|
user = forms.CharField(label=_('User'))
|
|
|
|
class Meta(BasePermissionForm.Meta):
|
|
fields = ('user',)
|
|
|
|
def __init__(self, *args, **kwargs):
|
|
if not kwargs.get('approved', False):
|
|
self.base_fields['user'].widget = forms.HiddenInput()
|
|
super(UserPermissionForm, self).__init__(*args, **kwargs)
|
|
|
|
def clean_user(self):
|
|
username = self.cleaned_data["user"]
|
|
try:
|
|
user = User.objects.get(username__iexact=username)
|
|
except User.DoesNotExist:
|
|
raise forms.ValidationError(
|
|
mark_safe(_("A user with that username does not exist.")))
|
|
check = permissions.BasePermission(user=user)
|
|
error_msg = None
|
|
if user.is_superuser:
|
|
error_msg = _("The user %(user)s do not need to request "
|
|
"access to any permission as it is a super user.")
|
|
elif check.has_perm(self.perm, self.obj):
|
|
error_msg = _("The user %(user)s already has the permission "
|
|
"'%(perm)s' for %(object_name)s '%(obj)s'")
|
|
elif check.requested_perm(self.perm, self.obj):
|
|
error_msg = _("The user %(user)s already requested the permission"
|
|
" '%(perm)s' for %(object_name)s '%(obj)s'")
|
|
if error_msg:
|
|
error_msg = error_msg % {
|
|
'object_name': self.obj._meta.object_name.lower(),
|
|
'perm': self.perm,
|
|
'obj': self.obj,
|
|
'user': user,
|
|
}
|
|
raise forms.ValidationError(mark_safe(error_msg))
|
|
return user
|
|
|
|
|
|
class GroupPermissionForm(BasePermissionForm):
|
|
group = forms.CharField(label=_('Group'))
|
|
|
|
class Meta(BasePermissionForm.Meta):
|
|
fields = ('group',)
|
|
|
|
def clean_group(self):
|
|
groupname = self.cleaned_data["group"]
|
|
try:
|
|
group = Group.objects.get(name__iexact=groupname)
|
|
except Group.DoesNotExist:
|
|
raise forms.ValidationError(
|
|
mark_safe(_("A group with that name does not exist.")))
|
|
check = permissions.BasePermission(group=group)
|
|
if check.has_perm(self.perm, self.obj):
|
|
raise forms.ValidationError(mark_safe(
|
|
_("This group already has the permission '%(perm)s' "
|
|
"for %(object_name)s '%(obj)s'") % {
|
|
'perm': self.perm,
|
|
'object_name': self.obj._meta.object_name.lower(),
|
|
'obj': self.obj,
|
|
}))
|
|
return group
|