36a51eeb73
Instead of inserting the path of the apps into the Python app, the apps are now referenced by their full import path. This solves name clashes with external or native Python libraries. Example: Mayan statistics app vs. Python new statistics library. Every app reference is now prepended with 'mayan.apps'. Existing config.yml files need to be updated manually. Signed-off-by: Roberto Rosario <roberto.rosario.gonzalez@gmail.com>
78 lines
2.3 KiB
Python
78 lines
2.3 KiB
Python
from __future__ import unicode_literals
|
|
|
|
from rest_framework import generics
|
|
|
|
from mayan.apps.rest_api.filters import MayanObjectPermissionsFilter
|
|
from mayan.apps.rest_api.permissions import MayanPermission
|
|
|
|
from .classes import Permission
|
|
from .models import Role
|
|
from .permissions import (
|
|
permission_role_create, permission_role_delete, permission_role_edit,
|
|
permission_role_view
|
|
)
|
|
from .serializers import (
|
|
PermissionSerializer, RoleSerializer, WritableRoleSerializer
|
|
)
|
|
|
|
|
|
class APIPermissionList(generics.ListAPIView):
|
|
"""
|
|
get: Returns a list of all the available permissions.
|
|
"""
|
|
serializer_class = PermissionSerializer
|
|
queryset = Permission.all()
|
|
|
|
|
|
class APIRoleListView(generics.ListCreateAPIView):
|
|
"""
|
|
get: Returns a list of all the roles.
|
|
post: Create a new role.
|
|
"""
|
|
filter_backends = (MayanObjectPermissionsFilter,)
|
|
mayan_object_permissions = {'GET': (permission_role_view,)}
|
|
mayan_view_permissions = {'POST': (permission_role_create,)}
|
|
permission_classes = (MayanPermission,)
|
|
queryset = Role.objects.all()
|
|
|
|
def get_serializer(self, *args, **kwargs):
|
|
if not self.request:
|
|
return None
|
|
|
|
return super(APIRoleListView, self).get_serializer(*args, **kwargs)
|
|
|
|
def get_serializer_class(self):
|
|
if self.request.method == 'GET':
|
|
return RoleSerializer
|
|
elif self.request.method == 'POST':
|
|
return WritableRoleSerializer
|
|
|
|
|
|
class APIRoleView(generics.RetrieveUpdateDestroyAPIView):
|
|
"""
|
|
delete: Delete the selected role.
|
|
get: Return the details of the selected role.
|
|
patch: Edit the selected role.
|
|
put: Edit the selected role.
|
|
"""
|
|
mayan_object_permissions = {
|
|
'GET': (permission_role_view,),
|
|
'PUT': (permission_role_edit,),
|
|
'PATCH': (permission_role_edit,),
|
|
'DELETE': (permission_role_delete,)
|
|
}
|
|
permission_classes = (MayanPermission,)
|
|
queryset = Role.objects.all()
|
|
|
|
def get_serializer(self, *args, **kwargs):
|
|
if not self.request:
|
|
return None
|
|
|
|
return super(APIRoleView, self).get_serializer(*args, **kwargs)
|
|
|
|
def get_serializer_class(self):
|
|
if self.request.method == 'GET':
|
|
return RoleSerializer
|
|
elif self.request.method in ('PATCH', 'PUT'):
|
|
return WritableRoleSerializer
|