staff.py 4.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120
  1. from dbsynce.models import Company
  2. from dbsynce.models import Relationship
  3. from dbsynce.models import Permissions
  4. from django.contrib.auth.decorators import login_required
  5. from django.http import JsonResponse
  6. from django.utils.translation import gettext as _
  7. from django_tables2 import SingleTableView
  8. from django.views.generic import TemplateView, DetailView
  9. from sharix_admin.tables import PartnersTable
  10. from sharix_admin.tables import PermissionsTable
  11. from sharix_admin.tables import RelationshipTable
  12. from sharix_admin.utils import group_required
  13. from .base import BaseView
  14. from django.contrib.auth import get_user_model
  15. from django.contrib.auth.mixins import UserPassesTestMixin
  16. from django.contrib.auth.models import Group
  17. from django.utils.translation import gettext as _
  18. #TODO This is abslutely incorrect, custom page needed!
  19. class AccessControlListView(BaseView, UserPassesTestMixin, SingleTableView):
  20. table_class = PermissionsTable
  21. queryset = Permissions.objects.all()
  22. template_name = 'sharix_admin/staff/access_control.html'
  23. page_title = 'Управление правами доступа'
  24. page_name = 'access_control'
  25. def get_context_data(self, **kwargs):
  26. context = super().get_context_data(**kwargs)
  27. context.update({
  28. 'title': _('User roles Management'),
  29. 'object_list': context['object_list'],
  30. 'groups': Group.objects.all()
  31. })
  32. return context
  33. def get_queryset(self):
  34. queryset = super().get_queryset()
  35. search_query = self.request.GET.get('q', '').strip()
  36. if search_query:
  37. queryset = queryset.filter(
  38. Q(id__icontains=search_query) |
  39. Q(user__icontains=search_query) |
  40. Q(checked_by__icontains=search_query) |
  41. Q(expire_date__icontains=search_query)
  42. ).distinct()
  43. return queryset
  44. def test_func(self) -> bool or None:
  45. group_names = ('METASERVICE-ADMIN')
  46. if bool(self.request.user.groups.filter(name=group_names)) or self.request.user.is_superuser:
  47. return True
  48. return False
  49. # return True
  50. class RelationshipListView(BaseView, SingleTableView):
  51. page_title = _('Relationship')
  52. page_name = 'relationship'
  53. table_class = RelationshipTable
  54. queryset = Relationship.objects.all()
  55. template_name = 'sharix_admin/staff/access_control.html'
  56. def get_context_data(self, **kwargs):
  57. context = super().get_context_data(**kwargs)
  58. context.update({
  59. 'object_list': context['object_list'],
  60. })
  61. return context
  62. def get_queryset(self):
  63. queryset = super().get_queryset()
  64. search_query = self.request.GET.get('q', '').strip()
  65. if search_query:
  66. queryset = queryset.filter(
  67. Q(id__icontains=search_query) |
  68. Q(user_who__icontains=search_query) |
  69. Q(user_whom__icontains=search_query) |
  70. Q(neg_type__icontains=search_query)
  71. ).distinct()
  72. return queryset
  73. def test_func(self):
  74. group_names = ('METASERVICE-ADMIN')
  75. if bool(self.request.user.groups.filter(name=group_names)) or self.request.user.is_superuser:
  76. return True
  77. return False
  78. @login_required
  79. @group_required('PLATFORM-ADMIN')
  80. def change_relationship_status(request):
  81. if request.method == 'POST':
  82. relationship_id = request.POST.get('relationship')
  83. new_status = request.POST.get('new_status')
  84. relationship = Relationship.objects.get(pk=relationship)
  85. relationship.status = new_status
  86. relationship.save()
  87. return JsonResponse({'status': 'success'})
  88. else:
  89. return JsonResponse({'status': 'error'})
  90. @login_required
  91. @group_required('PLATFORM-ADMIN')
  92. def change_permissions_status(request):
  93. if request.method == 'POST':
  94. permissions_id = request.POST.get('permissions')
  95. new_status = request.POST.get('new_status')
  96. permissions = Permissions.objects.get(pk=permissions)
  97. permissions.status = new_status
  98. permissions.save()
  99. return JsonResponse({'status': 'success'})
  100. else:
  101. return JsonResponse({'status': 'error'})