144 lines
4.9 KiB
Python
144 lines
4.9 KiB
Python
from __future__ import absolute_import, unicode_literals
|
|
|
|
from django.utils.translation import ugettext_lazy as _
|
|
|
|
from rest_framework import serializers
|
|
|
|
from mayan.apps.common.serializers import ContentTypeSerializer
|
|
from mayan.apps.permissions.models import Role
|
|
from mayan.apps.permissions.permissions import permission_role_edit
|
|
from mayan.apps.permissions.serializers import RoleSerializer
|
|
from mayan.apps.rest_api.mixins import ExternalObjectSerializerMixin
|
|
from mayan.apps.rest_api.relations import MultiKwargHyperlinkedIdentityField
|
|
|
|
from .models import AccessControlList
|
|
|
|
|
|
class AccessControlListSerializer(ExternalObjectSerializerMixin, serializers.ModelSerializer):
|
|
content_type = ContentTypeSerializer(read_only=True)
|
|
role = RoleSerializer(read_only=True)
|
|
permission_add_url = MultiKwargHyperlinkedIdentityField(
|
|
view_kwargs=(
|
|
{
|
|
'lookup_field': 'content_type__app_label', 'lookup_url_kwarg': 'app_label',
|
|
},
|
|
{
|
|
'lookup_field': 'content_type__model', 'lookup_url_kwarg': 'model_name',
|
|
},
|
|
{
|
|
'lookup_field': 'object_id', 'lookup_url_kwarg': 'object_id',
|
|
},
|
|
{
|
|
'lookup_field': 'pk', 'lookup_url_kwarg': 'acl_id',
|
|
}
|
|
),
|
|
view_name='rest_api:object-acl-permission-add'
|
|
)
|
|
permission_list_url = MultiKwargHyperlinkedIdentityField(
|
|
view_kwargs=(
|
|
{
|
|
'lookup_field': 'content_type__app_label', 'lookup_url_kwarg': 'app_label',
|
|
},
|
|
{
|
|
'lookup_field': 'content_type__model', 'lookup_url_kwarg': 'model_name',
|
|
},
|
|
{
|
|
'lookup_field': 'object_id', 'lookup_url_kwarg': 'object_id',
|
|
},
|
|
{
|
|
'lookup_field': 'pk', 'lookup_url_kwarg': 'acl_id',
|
|
}
|
|
),
|
|
view_name='rest_api:object-acl-permission-list'
|
|
)
|
|
permission_list_inherited_url = MultiKwargHyperlinkedIdentityField(
|
|
view_kwargs=(
|
|
{
|
|
'lookup_field': 'content_type__app_label', 'lookup_url_kwarg': 'app_label',
|
|
},
|
|
{
|
|
'lookup_field': 'content_type__model', 'lookup_url_kwarg': 'model_name',
|
|
},
|
|
{
|
|
'lookup_field': 'object_id', 'lookup_url_kwarg': 'object_id',
|
|
},
|
|
{
|
|
'lookup_field': 'pk', 'lookup_url_kwarg': 'acl_id',
|
|
}
|
|
),
|
|
view_name='rest_api:object-acl-permission-inherited-list'
|
|
)
|
|
permission_remove_url = MultiKwargHyperlinkedIdentityField(
|
|
view_kwargs=(
|
|
{
|
|
'lookup_field': 'content_type__app_label', 'lookup_url_kwarg': 'app_label',
|
|
},
|
|
{
|
|
'lookup_field': 'content_type__model', 'lookup_url_kwarg': 'model_name',
|
|
},
|
|
{
|
|
'lookup_field': 'object_id', 'lookup_url_kwarg': 'object_id',
|
|
},
|
|
{
|
|
'lookup_field': 'pk', 'lookup_url_kwarg': 'acl_id',
|
|
}
|
|
),
|
|
view_name='rest_api:object-acl-permission-remove'
|
|
)
|
|
role_id = serializers.CharField(
|
|
label=_('Role ID'),
|
|
help_text=_(
|
|
'Primary key of the role of the ACL that will be created or edited.'
|
|
), required=False, write_only=True
|
|
)
|
|
url = MultiKwargHyperlinkedIdentityField(
|
|
view_kwargs=(
|
|
{
|
|
'lookup_field': 'content_type__app_label', 'lookup_url_kwarg': 'app_label',
|
|
},
|
|
{
|
|
'lookup_field': 'content_type__model', 'lookup_url_kwarg': 'model_name',
|
|
},
|
|
{
|
|
'lookup_field': 'object_id', 'lookup_url_kwarg': 'object_id',
|
|
},
|
|
{
|
|
'lookup_field': 'pk', 'lookup_url_kwarg': 'acl_id',
|
|
}
|
|
),
|
|
view_name='rest_api:object-acl-detail'
|
|
)
|
|
|
|
class Meta:
|
|
external_object_model = Role
|
|
external_object_pk_field = 'role_id'
|
|
external_object_permission = permission_role_edit
|
|
fields = (
|
|
'content_type', 'id', 'object_id', 'permission_add_url',
|
|
'permission_list_url', 'permission_list_inherited_url',
|
|
'permission_remove_url', 'role', 'role_id',
|
|
'url'
|
|
)
|
|
model = AccessControlList
|
|
read_only_fields = ('object_id',)
|
|
|
|
def create(self, validated_data):
|
|
role = self.get_external_object()
|
|
|
|
if role:
|
|
validated_data['role'] = role
|
|
|
|
return super(AccessControlListSerializer, self).create(
|
|
validated_data=validated_data
|
|
)
|
|
|
|
def update(self, instance, validated_data):
|
|
role = self.get_external_object()
|
|
|
|
if role:
|
|
validated_data['role'] = role
|
|
|
|
return super(AccessControlListSerializer, self).update(
|
|
instance=instance, validated_data=validated_data
|
|
)
|