mirror of
https://gitlab.federez.net/re2o/re2o
synced 2024-06-02 16:02:16 +00:00
80 lines
2.6 KiB
Python
80 lines
2.6 KiB
Python
from django.db import models
|
|
from django import forms
|
|
from functools import partial
|
|
|
|
|
|
class FieldPermissionModelMixin:
|
|
field_permissions = {} # {'field_name': callable}
|
|
FIELD_PERM_CODENAME = 'can_change_{model}_{name}'
|
|
FIELD_PERMISSION_GETTER = 'can_change_{name}'
|
|
FIELD_PERMISSION_MISSING_DEFAULT = True
|
|
|
|
def has_perm(self, user, perm):
|
|
return user.has_perm(perm) # Never give 'obj' argument here
|
|
|
|
def has_field_perm(self, user, field):
|
|
if field in self.field_permissions:
|
|
checks = self.field_permissions[field]
|
|
if not isinstance(checks, (list, tuple)):
|
|
checks = [checks]
|
|
|
|
else:
|
|
checks = []
|
|
|
|
# Consult the optional field-specific hook.
|
|
getter_name = self.FIELD_PERMISSION_GETTER.format(name=field)
|
|
if hasattr(self, getter_name):
|
|
checks.append(getattr(self, getter_name))
|
|
|
|
# Try to find a static permission for the field
|
|
else:
|
|
perm_label = self.FIELD_PERM_CODENAME.format(**{
|
|
'model': self._meta.model_name,
|
|
'name': field,
|
|
})
|
|
if perm_label in dict(self._meta.permissions):
|
|
checks.append(perm_label)
|
|
|
|
# No requirements means no restrictions.
|
|
if not len(checks):
|
|
return self.FIELD_PERMISSION_MISSING_DEFAULT
|
|
|
|
# Try to find a user setting that qualifies them for permission.
|
|
for perm in checks:
|
|
if callable(perm):
|
|
result, reason = perm(user_request=user)
|
|
if result is not None:
|
|
return result
|
|
else:
|
|
result = user.has_perm(perm) # Don't supply 'obj', or else infinite recursion.
|
|
if result:
|
|
return True
|
|
|
|
# If no requirement can be met, then permission is denied.
|
|
return False
|
|
|
|
class FieldPermissionModel(FieldPermissionModelMixin, models.Model):
|
|
class Meta:
|
|
abstract = True
|
|
|
|
|
|
class FieldPermissionFormMixin:
|
|
"""
|
|
Construit le formulaire et retire les champs interdits
|
|
"""
|
|
def __init__(self, *args, **kwargs):
|
|
user = kwargs.pop('user')
|
|
|
|
super(FieldPermissionFormMixin, self).__init__(*args, **kwargs)
|
|
for name in self.fields:
|
|
if not self.instance.has_field_perm(user, field=name):
|
|
self.remove_unauthorized_field(name)
|
|
|
|
def remove_unauthorized_field(self, name):
|
|
del self.fields[name]
|
|
|
|
|
|
class FieldPermissionForm(FieldPermissionFormMixin, forms.ModelForm):
|
|
pass
|
|
|