| @@ 10-136 (lines=127) @@ | ||
| 7 | from permission.utils.field_lookup import field_lookup |
|
| 8 | ||
| 9 | ||
| 10 | class CollaboratorsPermissionLogic(PermissionLogic): |
|
| 11 | """ |
|
| 12 | Permission logic class for collaborators based permission system |
|
| 13 | """ |
|
| 14 | def __init__(self, |
|
| 15 | field_name=None, |
|
| 16 | any_permission=None, |
|
| 17 | change_permission=None, |
|
| 18 | delete_permission=None): |
|
| 19 | """ |
|
| 20 | Constructor |
|
| 21 | ||
| 22 | Parameters |
|
| 23 | ---------- |
|
| 24 | field_name : string |
|
| 25 | A field name of object which store the collaborators as django |
|
| 26 | relational fields for django user model. |
|
| 27 | You can specify the related object with '__' like django queryset |
|
| 28 | filter. |
|
| 29 | Default value will be taken from |
|
| 30 | ``PERMISSION_DEFAULT_COLLABORATORS_PERMISSION_LOGIC_FIELD_NAME`` in |
|
| 31 | settings. |
|
| 32 | any_permission : boolean |
|
| 33 | True for give any permission of the specified object to the |
|
| 34 | collaborators. |
|
| 35 | Default value will be taken from |
|
| 36 | ``PERMISSION_DEFAULT_COLLABORATORS_PERMISSION_LOGIC_ANY_PERMISSION`` |
|
| 37 | in settings. |
|
| 38 | change_permission : boolean |
|
| 39 | True for give change permission of the specified object to the |
|
| 40 | collaborators. |
|
| 41 | It will be ignored if :attr:`any_permission` is True. |
|
| 42 | Default value will be taken from |
|
| 43 | ``PERMISSION_DEFAULT_COLLABORATORS_PERMISSION_LOGIC_CHANGE_PERMISSION`` |
|
| 44 | in settings. |
|
| 45 | delete_permission : boolean |
|
| 46 | True for give delete permission of the specified object to the |
|
| 47 | collaborators. |
|
| 48 | It will be ignored if :attr:`any_permission` is True. |
|
| 49 | Default value will be taken from |
|
| 50 | ``PERMISSION_DEFAULT_COLLABORATORS_PERMISSION_LOGIC_DELETE_PERMISSION`` |
|
| 51 | in settings. |
|
| 52 | """ |
|
| 53 | self.field_name = field_name |
|
| 54 | self.any_permission = any_permission |
|
| 55 | self.change_permission = change_permission |
|
| 56 | self.delete_permission = delete_permission |
|
| 57 | ||
| 58 | if self.field_name is None: |
|
| 59 | self.field_name = \ |
|
| 60 | settings.PERMISSION_DEFAULT_CPL_FIELD_NAME |
|
| 61 | if self.any_permission is None: |
|
| 62 | self.any_permission = \ |
|
| 63 | settings.PERMISSION_DEFAULT_CPL_ANY_PERMISSION |
|
| 64 | if self.change_permission is None: |
|
| 65 | self.change_permission = \ |
|
| 66 | settings.PERMISSION_DEFAULT_CPL_CHANGE_PERMISSION |
|
| 67 | if self.delete_permission is None: |
|
| 68 | self.delete_permission = \ |
|
| 69 | settings.PERMISSION_DEFAULT_CPL_DELETE_PERMISSION |
|
| 70 | ||
| 71 | def has_perm(self, user_obj, perm, obj=None): |
|
| 72 | """ |
|
| 73 | Check if user have permission (of object) |
|
| 74 | ||
| 75 | If the user_obj is not authenticated, it return ``False``. |
|
| 76 | ||
| 77 | If no object is specified, it return ``True`` when the corresponding |
|
| 78 | permission was specified to ``True`` (changed from v0.7.0). |
|
| 79 | This behavior is based on the django system. |
|
| 80 | https://code.djangoproject.com/wiki/RowLevelPermissions |
|
| 81 | ||
| 82 | ||
| 83 | If an object is specified, it will return ``True`` if the user is |
|
| 84 | found in ``field_name`` of the object (e.g. ``obj.collaborators``). |
|
| 85 | So once the object store the user as a collaborator in |
|
| 86 | ``field_name`` attribute (default: ``collaborators``), the collaborator |
|
| 87 | can change or delete the object (you can change this behavior to set |
|
| 88 | ``any_permission``, ``change_permission`` or ``delete_permission`` |
|
| 89 | attributes of this instance). |
|
| 90 | ||
| 91 | Parameters |
|
| 92 | ---------- |
|
| 93 | user_obj : django user model instance |
|
| 94 | A django user model instance which be checked |
|
| 95 | perm : string |
|
| 96 | `app_label.codename` formatted permission string |
|
| 97 | obj : None or django model instance |
|
| 98 | None or django model instance for object permission |
|
| 99 | ||
| 100 | Returns |
|
| 101 | ------- |
|
| 102 | boolean |
|
| 103 | Whether the specified user have specified permission (of specified |
|
| 104 | object). |
|
| 105 | """ |
|
| 106 | if not user_obj.is_authenticated(): |
|
| 107 | return False |
|
| 108 | # construct the permission full name |
|
| 109 | change_permission = self.get_full_permission_string('change') |
|
| 110 | delete_permission = self.get_full_permission_string('delete') |
|
| 111 | if obj is None: |
|
| 112 | # object permission without obj should return True |
|
| 113 | # Ref: https://code.djangoproject.com/wiki/RowLevelPermissions |
|
| 114 | if self.any_permission: |
|
| 115 | return True |
|
| 116 | if self.change_permission and perm == change_permission: |
|
| 117 | return True |
|
| 118 | if self.delete_permission and perm == delete_permission: |
|
| 119 | return True |
|
| 120 | return False |
|
| 121 | elif user_obj.is_active: |
|
| 122 | # get collaborator queryset |
|
| 123 | collaborators = field_lookup(obj, self.field_name) |
|
| 124 | if hasattr(collaborators, 'all'): |
|
| 125 | collaborators = collaborators.all() |
|
| 126 | if user_obj in collaborators: |
|
| 127 | if self.any_permission: |
|
| 128 | # have any kind of permissions to the obj |
|
| 129 | return True |
|
| 130 | if (self.change_permission and |
|
| 131 | perm == change_permission): |
|
| 132 | return True |
|
| 133 | if (self.delete_permission and |
|
| 134 | perm == delete_permission): |
|
| 135 | return True |
|
| 136 | return False |
|
| 137 | ||
| @@ 10-132 (lines=123) @@ | ||
| 7 | from permission.utils.field_lookup import field_lookup |
|
| 8 | ||
| 9 | ||
| 10 | class AuthorPermissionLogic(PermissionLogic): |
|
| 11 | """ |
|
| 12 | Permission logic class for author based permission system |
|
| 13 | """ |
|
| 14 | def __init__(self, |
|
| 15 | field_name=None, |
|
| 16 | any_permission=None, |
|
| 17 | change_permission=None, |
|
| 18 | delete_permission=None): |
|
| 19 | """ |
|
| 20 | Constructor |
|
| 21 | ||
| 22 | Parameters |
|
| 23 | ---------- |
|
| 24 | field_name : string |
|
| 25 | A field name of object which store the author as django user model. |
|
| 26 | You can specify the related object with '__' like django queryset |
|
| 27 | filter. |
|
| 28 | Default value will be taken from |
|
| 29 | ``PERMISSION_DEFAULT_APL_FIELD_NAME`` in |
|
| 30 | settings. |
|
| 31 | any_permission : boolean |
|
| 32 | True for give any permission of the specified object to the author |
|
| 33 | Default value will be taken from |
|
| 34 | ``PERMISSION_DEFAULT_APL_ANY_PERMISSION`` in |
|
| 35 | settings. |
|
| 36 | change_permission : boolean |
|
| 37 | True for give change permission of the specified object to the |
|
| 38 | author. |
|
| 39 | It will be ignored if :attr:`any_permission` is True. |
|
| 40 | Default value will be taken from |
|
| 41 | ``PERMISSION_DEFAULT_APL_CHANGE_PERMISSION`` in |
|
| 42 | settings. |
|
| 43 | delete_permission : boolean |
|
| 44 | True for give delete permission of the specified object to the |
|
| 45 | author. |
|
| 46 | It will be ignored if :attr:`any_permission` is True. |
|
| 47 | Default value will be taken from |
|
| 48 | ``PERMISSION_DEFAULT_APL_DELETE_PERMISSION`` in |
|
| 49 | settings. |
|
| 50 | """ |
|
| 51 | self.field_name = field_name |
|
| 52 | self.any_permission = any_permission |
|
| 53 | self.change_permission = change_permission |
|
| 54 | self.delete_permission = delete_permission |
|
| 55 | ||
| 56 | if self.field_name is None: |
|
| 57 | self.field_name = \ |
|
| 58 | settings.PERMISSION_DEFAULT_APL_FIELD_NAME |
|
| 59 | if self.any_permission is None: |
|
| 60 | self.any_permission = \ |
|
| 61 | settings.PERMISSION_DEFAULT_APL_ANY_PERMISSION |
|
| 62 | if self.change_permission is None: |
|
| 63 | self.change_permission = \ |
|
| 64 | settings.PERMISSION_DEFAULT_APL_CHANGE_PERMISSION |
|
| 65 | if self.delete_permission is None: |
|
| 66 | self.delete_permission = \ |
|
| 67 | settings.PERMISSION_DEFAULT_APL_DELETE_PERMISSION |
|
| 68 | ||
| 69 | def has_perm(self, user_obj, perm, obj=None): |
|
| 70 | """ |
|
| 71 | Check if user have permission (of object) |
|
| 72 | ||
| 73 | If the user_obj is not authenticated, it return ``False``. |
|
| 74 | ||
| 75 | If no object is specified, it return ``True`` when the corresponding |
|
| 76 | permission was specified to ``True`` (changed from v0.7.0). |
|
| 77 | This behavior is based on the django system. |
|
| 78 | https://code.djangoproject.com/wiki/RowLevelPermissions |
|
| 79 | ||
| 80 | If an object is specified, it will return ``True`` if the user is |
|
| 81 | specified in ``field_name`` of the object (e.g. ``obj.author``). |
|
| 82 | So once user create an object and the object store who is the author in |
|
| 83 | ``field_name`` attribute (default: ``author``), the author can change |
|
| 84 | or delete the object (you can change this behavior to set |
|
| 85 | ``any_permission``, ``change_permissino`` or ``delete_permission`` |
|
| 86 | attributes of this instance). |
|
| 87 | ||
| 88 | Parameters |
|
| 89 | ---------- |
|
| 90 | user_obj : django user model instance |
|
| 91 | A django user model instance which be checked |
|
| 92 | perm : string |
|
| 93 | `app_label.codename` formatted permission string |
|
| 94 | obj : None or django model instance |
|
| 95 | None or django model instance for object permission |
|
| 96 | ||
| 97 | Returns |
|
| 98 | ------- |
|
| 99 | boolean |
|
| 100 | Whether the specified user have specified permission (of specified |
|
| 101 | object). |
|
| 102 | """ |
|
| 103 | if not user_obj.is_authenticated(): |
|
| 104 | return False |
|
| 105 | # construct the permission full name |
|
| 106 | change_permission = self.get_full_permission_string('change') |
|
| 107 | delete_permission = self.get_full_permission_string('delete') |
|
| 108 | # check if the user is authenticated |
|
| 109 | if obj is None: |
|
| 110 | # object permission without obj should return True |
|
| 111 | # Ref: https://code.djangoproject.com/wiki/RowLevelPermissions |
|
| 112 | if self.any_permission: |
|
| 113 | return True |
|
| 114 | if self.change_permission and perm == change_permission: |
|
| 115 | return True |
|
| 116 | if self.delete_permission and perm == delete_permission: |
|
| 117 | return True |
|
| 118 | return False |
|
| 119 | elif user_obj.is_active: |
|
| 120 | # get author instance |
|
| 121 | author = field_lookup(obj, self.field_name) |
|
| 122 | if author == user_obj: |
|
| 123 | if self.any_permission: |
|
| 124 | # have any kind of permissions to the obj |
|
| 125 | return True |
|
| 126 | if (self.change_permission and |
|
| 127 | perm == change_permission): |
|
| 128 | return True |
|
| 129 | if (self.delete_permission and |
|
| 130 | perm == delete_permission): |
|
| 131 | return True |
|
| 132 | return False |
|
| 133 | ||