@@ 74-138 (lines=65) @@ | ||
71 | self.delete_permission = \ |
|
72 | settings.PERMISSION_DEFAULT_GIPL_DELETE_PERMISSION |
|
73 | ||
74 | def has_perm(self, user_obj, perm, obj=None): |
|
75 | """ |
|
76 | Check if user have permission (of object) |
|
77 | ||
78 | If the user_obj is not authenticated, it return ``False``. |
|
79 | ||
80 | If no object is specified, it return ``True`` when the corresponding |
|
81 | permission was specified to ``True`` (changed from v0.7.0). |
|
82 | This behavior is based on the django system. |
|
83 | https://code.djangoproject.com/wiki/RowLevelPermissions |
|
84 | ||
85 | If an object is specified, it will return ``True`` if the user is |
|
86 | in group specified in ``group_names`` of this instance. |
|
87 | This permission logic is used mainly for group based role permission |
|
88 | system. |
|
89 | You can change this behavior to set ``any_permission``, |
|
90 | ``add_permission``, ``change_permission``, or ``delete_permission`` |
|
91 | attributes of this instance. |
|
92 | ||
93 | Parameters |
|
94 | ---------- |
|
95 | user_obj : django user model instance |
|
96 | A django user model instance which be checked |
|
97 | perm : string |
|
98 | `app_label.codename` formatted permission string |
|
99 | obj : None or django model instance |
|
100 | None or django model instance for object permission |
|
101 | ||
102 | Returns |
|
103 | ------- |
|
104 | boolean |
|
105 | Whether the specified user have specified permission (of specified |
|
106 | object). |
|
107 | """ |
|
108 | if not is_authenticated(user_obj): |
|
109 | return False |
|
110 | # construct the permission full name |
|
111 | add_permission = self.get_full_permission_string('add') |
|
112 | change_permission = self.get_full_permission_string('change') |
|
113 | delete_permission = self.get_full_permission_string('delete') |
|
114 | if obj is None: |
|
115 | if user_obj.groups.filter(name__in=self.group_names): |
|
116 | if self.add_permission and perm == add_permission: |
|
117 | return True |
|
118 | if self.change_permission and perm == change_permission: |
|
119 | return True |
|
120 | if self.delete_permission and perm == delete_permission: |
|
121 | return True |
|
122 | return self.any_permission |
|
123 | return False |
|
124 | elif user_obj.is_active: |
|
125 | if user_obj.groups.filter(name__in=self.group_names): |
|
126 | if self.any_permission: |
|
127 | # have any kind of permissions to the obj |
|
128 | return True |
|
129 | if (self.add_permission and |
|
130 | perm == add_permission): |
|
131 | return True |
|
132 | if (self.change_permission and |
|
133 | perm == change_permission): |
|
134 | return True |
|
135 | if (self.delete_permission and |
|
136 | perm == delete_permission): |
|
137 | return True |
|
138 | return False |
|
139 |
@@ 69-131 (lines=63) @@ | ||
66 | self.delete_permission = \ |
|
67 | settings.PERMISSION_DEFAULT_SPL_DELETE_PERMISSION |
|
68 | ||
69 | def has_perm(self, user_obj, perm, obj=None): |
|
70 | """ |
|
71 | Check if user have permission (of object) |
|
72 | ||
73 | If the user_obj is not authenticated, it return ``False``. |
|
74 | ||
75 | If no object is specified, it return ``True`` when the corresponding |
|
76 | permission was specified to ``True`` (changed from v0.7.0). |
|
77 | This behavior is based on the django system. |
|
78 | https://code.djangoproject.com/wiki/RowLevelPermissions |
|
79 | ||
80 | If an object is specified, it will return ``True`` if the user is |
|
81 | staff. The staff can add, change or delete the object (you can change |
|
82 | this behavior to set ``any_permission``, ``add_permission``, |
|
83 | ``change_permission``, or ``delete_permission`` attributes of this |
|
84 | instance). |
|
85 | ||
86 | Parameters |
|
87 | ---------- |
|
88 | user_obj : django user model instance |
|
89 | A django user model instance which be checked |
|
90 | perm : string |
|
91 | `app_label.codename` formatted permission string |
|
92 | obj : None or django model instance |
|
93 | None or django model instance for object permission |
|
94 | ||
95 | Returns |
|
96 | ------- |
|
97 | boolean |
|
98 | Weather the specified user have specified permission (of specified |
|
99 | object). |
|
100 | """ |
|
101 | if not is_authenticated(user_obj): |
|
102 | return False |
|
103 | # construct the permission full name |
|
104 | add_permission = self.get_full_permission_string('add') |
|
105 | change_permission = self.get_full_permission_string('change') |
|
106 | delete_permission = self.get_full_permission_string('delete') |
|
107 | if obj is None: |
|
108 | if user_obj.is_staff: |
|
109 | if self.add_permission and perm == add_permission: |
|
110 | return True |
|
111 | if self.change_permission and perm == change_permission: |
|
112 | return True |
|
113 | if self.delete_permission and perm == delete_permission: |
|
114 | return True |
|
115 | return self.any_permission |
|
116 | return False |
|
117 | elif user_obj.is_active: |
|
118 | if user_obj.is_staff: |
|
119 | if self.any_permission: |
|
120 | # have any kind of permissions to the obj |
|
121 | return True |
|
122 | if (self.add_permission and |
|
123 | perm == add_permission): |
|
124 | return True |
|
125 | if (self.change_permission and |
|
126 | perm == change_permission): |
|
127 | return True |
|
128 | if (self.delete_permission and |
|
129 | perm == delete_permission): |
|
130 | return True |
|
131 | return False |
|
132 |