36a51eeb73
Instead of inserting the path of the apps into the Python app, the apps are now referenced by their full import path. This solves name clashes with external or native Python libraries. Example: Mayan statistics app vs. Python new statistics library. Every app reference is now prepended with 'mayan.apps'. Existing config.yml files need to be updated manually. Signed-off-by: Roberto Rosario <roberto.rosario.gonzalez@gmail.com>
123 lines
3.9 KiB
Python
123 lines
3.9 KiB
Python
from __future__ import unicode_literals
|
|
|
|
from django.contrib.auth import get_user_model
|
|
from django.contrib.auth.models import Group
|
|
from django.contrib.auth.password_validation import validate_password
|
|
from django.core.exceptions import PermissionDenied
|
|
from django.utils.translation import ugettext_lazy as _
|
|
|
|
from rest_framework import serializers
|
|
from rest_framework.exceptions import ValidationError
|
|
|
|
from mayan.apps.acls.models import AccessControlList
|
|
|
|
from .permissions import permission_group_view
|
|
|
|
|
|
class GroupSerializer(serializers.HyperlinkedModelSerializer):
|
|
users_count = serializers.SerializerMethodField()
|
|
|
|
class Meta:
|
|
extra_kwargs = {
|
|
'url': {'view_name': 'rest_api:group-detail'}
|
|
}
|
|
fields = ('id', 'name', 'url', 'users_count')
|
|
model = Group
|
|
|
|
def get_users_count(self, instance):
|
|
return instance.user_set.count()
|
|
|
|
|
|
class UserGroupListSerializer(serializers.Serializer):
|
|
group_pk_list = serializers.CharField(
|
|
help_text=_(
|
|
'Comma separated list of group primary keys to assign this '
|
|
'user to.'
|
|
)
|
|
)
|
|
|
|
def create(self, validated_data):
|
|
validated_data['user'].groups.clear()
|
|
try:
|
|
pk_list = validated_data['group_pk_list'].split(',')
|
|
|
|
for group in Group.objects.filter(pk__in=pk_list):
|
|
try:
|
|
AccessControlList.objects.check_access(
|
|
permissions=(permission_group_view,),
|
|
user=self.context['request'].user, obj=group
|
|
)
|
|
except PermissionDenied:
|
|
pass
|
|
else:
|
|
validated_data['user'].groups.add(group)
|
|
except Exception as exception:
|
|
raise ValidationError(exception)
|
|
|
|
return {'group_pk_list': validated_data['group_pk_list']}
|
|
|
|
|
|
class UserSerializer(serializers.HyperlinkedModelSerializer):
|
|
groups = GroupSerializer(many=True, read_only=True)
|
|
groups_pk_list = serializers.CharField(
|
|
help_text=_(
|
|
'List of group primary keys to which to add the user.'
|
|
), required=False
|
|
)
|
|
password = serializers.CharField(
|
|
required=False, style={'input_type': 'password'}, write_only=True
|
|
)
|
|
|
|
class Meta:
|
|
extra_kwargs = {
|
|
'url': {'view_name': 'rest_api:user-detail'}
|
|
}
|
|
fields = (
|
|
'first_name', 'date_joined', 'email', 'groups', 'groups_pk_list',
|
|
'id', 'is_active', 'last_login', 'last_name', 'password', 'url',
|
|
'username'
|
|
)
|
|
model = get_user_model()
|
|
read_only_fields = ('groups', 'is_active', 'last_login', 'date_joined')
|
|
write_only_fields = ('password', 'group_pk_list')
|
|
|
|
def _add_groups(self, instance):
|
|
instance.groups.add(
|
|
*Group.objects.filter(pk__in=self.groups_pk_list.split(','))
|
|
)
|
|
|
|
def create(self, validated_data):
|
|
self.groups_pk_list = validated_data.pop('groups_pk_list', '')
|
|
password = validated_data.pop('password', None)
|
|
instance = super(UserSerializer, self).create(validated_data)
|
|
|
|
if password:
|
|
instance.set_password(password)
|
|
instance.save()
|
|
|
|
if self.groups_pk_list:
|
|
self._add_groups(instance=instance)
|
|
|
|
return instance
|
|
|
|
def update(self, instance, validated_data):
|
|
self.groups_pk_list = validated_data.pop('groups_pk_list', '')
|
|
|
|
if 'password' in validated_data:
|
|
instance.set_password(validated_data['password'])
|
|
validated_data.pop('password')
|
|
|
|
instance = super(UserSerializer, self).update(instance, validated_data)
|
|
|
|
if self.groups_pk_list:
|
|
instance.groups.clear()
|
|
self._add_groups(instance=instance)
|
|
|
|
return instance
|
|
|
|
def validate(self, data):
|
|
if 'password' in data:
|
|
validate_password(data['password'], self.instance)
|
|
|
|
return data
|