Migrates lookups

* products
* files
* Groups
* Clubs
* Accounting

core/api.py

@@ -11,11 +11,15 @@ from ninja_extra.pagination import PageNumberPaginationExtra
 from ninja_extra.schemas import PaginatedResponseSchema
 
 from club.models import Mailing
-from core.api_permissions import CanView, IsLoggedInCounter, IsOldSubscriber, IsRoot
-from core.models import User
+from core.api_permissions import (
+    CanAccessLookup,
+    CanView,
+)
+from core.models import SithFile, User
 from core.schemas import (
     FamilyGodfatherSchema,
     MarkdownSchema,
+    SithFileSchema,
     UserFamilySchema,
     UserFilterSchema,
     UserProfileSchema,
@@ -44,7 +48,7 @@ class MailingListController(ControllerBase):
         return data
 
 
-@api_controller("/user", permissions=[IsOldSubscriber | IsRoot | IsLoggedInCounter])
+@api_controller("/user", permissions=[CanAccessLookup])
 class UserController(ControllerBase):
     @route.get("", response=list[UserProfileSchema])
     def fetch_profiles(self, pks: Query[set[int]]):
@@ -62,6 +66,18 @@ class UserController(ControllerBase):
         )
 
 
+@api_controller("/file")
+class SithFileController(ControllerBase):
+    @route.get(
+        "/search",
+        response=PaginatedResponseSchema[SithFileSchema],
+        permissions=[CanAccessLookup],
+    )
+    @paginate(PageNumberPaginationExtra, page_size=50)
+    def search_files(self, query: Annotated[str, annotated_types.MinLen(1)]):
+        return SithFile.objects.filter(is_in_sas=False).filter(name__icontains=query)
+
+
 DepthValue = Annotated[int, annotated_types.Ge(0), annotated_types.Le(10)]
 DEFAULT_DEPTH = 4
 

core/api_permissions.py

@@ -127,9 +127,12 @@ class IsLoggedInCounter(BasePermission):
     """Check that a user is logged in a counter."""
 
     def has_permission(self, request: HttpRequest, controller: ControllerBase) -> bool:
-        if "/counter/" not in request.META["HTTP_REFERER"]:
+        if "/counter/" not in request.META.get("HTTP_REFERER", ""):
             return False
         token = request.session.get("counter_token")
         if not token:
             return False
         return Counter.objects.filter(token=token).exists()
+
+
+CanAccessLookup = IsOldSubscriber | IsRoot | IsLoggedInCounter

core/lookups.py

@@ -30,7 +30,7 @@ class RightManagedLookupChannel(LookupChannel):
             raise PermissionDenied
 
 
-@register("users")
+@register("users")  # Migrated
 class UsersLookup(RightManagedLookupChannel):
     model = User
 
@@ -44,7 +44,7 @@ class UsersLookup(RightManagedLookupChannel):
         return item.get_display_name()
 
 
-@register("customers")
+@register("customers")  # Never used
 class CustomerLookup(RightManagedLookupChannel):
     model = Customer
 
@@ -58,7 +58,7 @@ class CustomerLookup(RightManagedLookupChannel):
         return f"{obj.user.get_display_name()} ({obj.account_id})"
 
 
-@register("groups")
+@register("groups")  # Migrated
 class GroupsLookup(RightManagedLookupChannel):
     model = Group
 
@@ -72,7 +72,7 @@ class GroupsLookup(RightManagedLookupChannel):
         return item.name
 
 
-@register("clubs")
+@register("clubs")  # Migrated
 class ClubLookup(RightManagedLookupChannel):
     model = Club
 
@@ -86,7 +86,7 @@ class ClubLookup(RightManagedLookupChannel):
         return item.name
 
 
-@register("counters")
+@register("counters")  # Migrated
 class CountersLookup(RightManagedLookupChannel):
     model = Counter
 
@@ -97,7 +97,7 @@ class CountersLookup(RightManagedLookupChannel):
         return item.name
 
 
-@register("products")
+@register("products")  # Migrated
 class ProductsLookup(RightManagedLookupChannel):
     model = Product
 
@@ -111,7 +111,7 @@ class ProductsLookup(RightManagedLookupChannel):
         return "%s (%s)" % (item.name, item.code)
 
 
-@register("files")
+@register("files")  # Migrated
 class SithFileLookup(RightManagedLookupChannel):
     model = SithFile
 
@@ -119,7 +119,7 @@ class SithFileLookup(RightManagedLookupChannel):
         return self.model.objects.filter(name__icontains=q)[:50]
 
 
-@register("club_accounts")
+@register("club_accounts")  # Migrated
 class ClubAccountLookup(RightManagedLookupChannel):
     model = ClubAccount
 
@@ -130,7 +130,7 @@ class ClubAccountLookup(RightManagedLookupChannel):
         return item.name
 
 
-@register("companies")
+@register("companies")  # Migrated
 class CompaniesLookup(RightManagedLookupChannel):
     model = Company
 

core/schemas.py

@@ -8,7 +8,7 @@ from haystack.query import SearchQuerySet
 from ninja import FilterSchema, ModelSchema, Schema
 from pydantic import AliasChoices, Field
 
-from core.models import User
+from core.models import Group, SithFile, User
 
 
 class SimpleUserSchema(ModelSchema):
@@ -45,6 +45,18 @@ class UserProfileSchema(ModelSchema):
         return obj.profile_pict.get_download_url()
 
 
+class SithFileSchema(ModelSchema):
+    class Meta:
+        model = SithFile
+        fields = ["id", "name"]
+
+
+class GroupSchema(ModelSchema):
+    class Meta:
+        model = Group
+        fields = ["id", "name"]
+
+
 class UserFilterSchema(FilterSchema):
     search: Annotated[str, MinLen(1)]
     exclude: list[int] | None = Field(