Close issue #109, Add Roles API endpoints
This commit is contained in:
@@ -6,6 +6,7 @@ from django.db.models.signals import post_save
|
||||
|
||||
from navigation.api import register_links
|
||||
from project_setup.api import register_setup
|
||||
from rest_api.classes import APIEndPoint
|
||||
|
||||
from .models import Role
|
||||
from .links import (permission_grant, permission_revoke, role_create,
|
||||
@@ -36,3 +37,5 @@ def user_post_save(sender, instance, **kwargs):
|
||||
post_save.connect(user_post_save, sender=User)
|
||||
|
||||
register_setup(role_list)
|
||||
|
||||
APIEndPoint('permissions')
|
||||
|
||||
56
mayan/apps/permissions/api_views.py
Normal file
56
mayan/apps/permissions/api_views.py
Normal file
@@ -0,0 +1,56 @@
|
||||
from rest_framework import generics, views
|
||||
|
||||
from rest_api.filters import MayanObjectPermissionsFilter
|
||||
from rest_api.permissions import MayanPermission
|
||||
|
||||
from .models import Role
|
||||
from .permissions import (PERMISSION_ROLE_CREATE, PERMISSION_ROLE_DELETE,
|
||||
PERMISSION_ROLE_EDIT, PERMISSION_ROLE_VIEW)
|
||||
from .serializers import RoleSerializer
|
||||
|
||||
|
||||
class APIRoleListView(generics.ListCreateAPIView):
|
||||
serializer_class = RoleSerializer
|
||||
queryset = Role.objects.all()
|
||||
|
||||
permission_classes = (MayanPermission,)
|
||||
filter_backends = (MayanObjectPermissionsFilter,)
|
||||
mayan_object_permissions = {'GET': [PERMISSION_ROLE_VIEW]}
|
||||
mayan_view_permissions = {'POST': [PERMISSION_ROLE_CREATE]}
|
||||
|
||||
def get(self, *args, **kwargs):
|
||||
"""Returns a list of all the roles."""
|
||||
return super(APIRoleListView, self).get(*args, **kwargs)
|
||||
|
||||
def post(self, *args, **kwargs):
|
||||
"""Create a new role."""
|
||||
return super(APIRoleListView, self).post(*args, **kwargs)
|
||||
|
||||
|
||||
class APIRoleView(generics.RetrieveUpdateDestroyAPIView):
|
||||
serializer_class = RoleSerializer
|
||||
queryset = Role.objects.all()
|
||||
|
||||
permission_classes = (MayanPermission,)
|
||||
mayan_object_permissions = {
|
||||
'GET': [PERMISSION_ROLE_VIEW],
|
||||
'PUT': [PERMISSION_ROLE_EDIT],
|
||||
'PATCH': [PERMISSION_ROLE_EDIT],
|
||||
'DELETE': [PERMISSION_ROLE_DELETE]
|
||||
}
|
||||
|
||||
def delete(self, *args, **kwargs):
|
||||
"""Delete the selected role."""
|
||||
return super(APIRoleView, self).delete(*args, **kwargs)
|
||||
|
||||
def get(self, *args, **kwargs):
|
||||
"""Return the details of the selected role."""
|
||||
return super(APIRoleView, self).get(*args, **kwargs)
|
||||
|
||||
def patch(self, *args, **kwargs):
|
||||
"""Edit the selected role."""
|
||||
return super(APIRoleView, self).patch(*args, **kwargs)
|
||||
|
||||
def put(self, *args, **kwargs):
|
||||
"""Edit the selected role."""
|
||||
return super(APIRoleView, self).put(*args, **kwargs)
|
||||
9
mayan/apps/permissions/serializers.py
Normal file
9
mayan/apps/permissions/serializers.py
Normal file
@@ -0,0 +1,9 @@
|
||||
from rest_framework import serializers
|
||||
|
||||
from .models import Role
|
||||
|
||||
|
||||
class RoleSerializer(serializers.ModelSerializer):
|
||||
class Meta:
|
||||
fields = ('id', 'label')
|
||||
model = Role
|
||||
@@ -2,6 +2,7 @@ from __future__ import absolute_import
|
||||
|
||||
from django.conf.urls import patterns, url
|
||||
|
||||
from .api_views import APIRoleListView, APIRoleView
|
||||
from .views import RoleCreateView, RoleDeleteView, RoleEditView
|
||||
|
||||
urlpatterns = patterns('permissions.views',
|
||||
@@ -15,3 +16,8 @@ urlpatterns = patterns('permissions.views',
|
||||
url(r'^permissions/multiple/grant/$', 'permission_grant', (), 'permission_multiple_grant'),
|
||||
url(r'^permissions/multiple/revoke/$', 'permission_revoke', (), 'permission_multiple_revoke'),
|
||||
)
|
||||
|
||||
api_urls = patterns('',
|
||||
url(r'^roles/$', APIRoleListView.as_view(), name='role-list'),
|
||||
url(r'^roles/(?P<pk>[0-9]+)/$', APIRoleView.as_view(), name='role-detail'),
|
||||
)
|
||||
|
||||
Reference in New Issue
Block a user