41 lines
1.3 KiB
Python
41 lines
1.3 KiB
Python
from __future__ import absolute_import, unicode_literals
|
|
|
|
from django.apps import apps
|
|
from django.core.exceptions import PermissionDenied
|
|
|
|
from permissions import Permission
|
|
|
|
|
|
def get_cascade_condition(app_label, model_name, object_permission, view_permission=None):
|
|
"""
|
|
Return a function that first checks to see if the user has the view
|
|
permission. If not, then filters the objects with the object permission
|
|
and return True if there is at least one item in the filtered queryset.
|
|
This is used to avoid showing a link that ends up in a view with an
|
|
empty results set.
|
|
"""
|
|
def condition(context):
|
|
AccessControlList = apps.get_model(
|
|
app_label='acls', model_name='AccessControlList'
|
|
)
|
|
Model = apps.get_model(app_label=app_label, model_name=model_name)
|
|
|
|
if view_permission:
|
|
try:
|
|
Permission.check_permissions(
|
|
requester=context.request.user,
|
|
permissions=(view_permission,)
|
|
)
|
|
except PermissionDenied:
|
|
pass
|
|
else:
|
|
return True
|
|
|
|
queryset = AccessControlList.objects.filter_by_access(
|
|
permission=object_permission, user=context.request.user,
|
|
queryset=Model.objects.all()
|
|
)
|
|
return queryset.count() > 0
|
|
|
|
return condition
|