36a51eeb73
Instead of inserting the path of the apps into the Python app, the apps are now referenced by their full import path. This solves name clashes with external or native Python libraries. Example: Mayan statistics app vs. Python new statistics library. Every app reference is now prepended with 'mayan.apps'. Existing config.yml files need to be updated manually. Signed-off-by: Roberto Rosario <roberto.rosario.gonzalez@gmail.com>
41 lines
1.4 KiB
Python
41 lines
1.4 KiB
Python
from __future__ import absolute_import, unicode_literals
|
|
|
|
from django.apps import apps
|
|
from django.core.exceptions import PermissionDenied
|
|
|
|
from mayan.apps.permissions import Permission
|
|
|
|
|
|
def get_cascade_condition(app_label, model_name, object_permission, view_permission=None):
|
|
"""
|
|
Return a function that first checks to see if the user has the view
|
|
permission. If not, then filters the objects with the object permission
|
|
and return True if there is at least one item in the filtered queryset.
|
|
This is used to avoid showing a link that ends up in a view with an
|
|
empty results set.
|
|
"""
|
|
def condition(context):
|
|
AccessControlList = apps.get_model(
|
|
app_label='acls', model_name='AccessControlList'
|
|
)
|
|
Model = apps.get_model(app_label=app_label, model_name=model_name)
|
|
|
|
if view_permission:
|
|
try:
|
|
Permission.check_permissions(
|
|
requester=context.request.user,
|
|
permissions=(view_permission,)
|
|
)
|
|
except PermissionDenied:
|
|
pass
|
|
else:
|
|
return True
|
|
|
|
queryset = AccessControlList.objects.filter_by_access(
|
|
permission=object_permission, user=context.request.user,
|
|
queryset=Model.objects.all()
|
|
)
|
|
return queryset.count() > 0
|
|
|
|
return condition
|