mirror of
https://github.com/ae-utbm/sith3.git
synced 2024-07-01 10:58:04 +00:00
34 lines
1.1 KiB
Python
34 lines
1.1 KiB
Python
from rest_framework.response import Response
|
|
from rest_framework import viewsets
|
|
from django.core.exceptions import PermissionDenied
|
|
from rest_framework.decorators import detail_route
|
|
|
|
from core.views import can_view, can_edit
|
|
|
|
class RightManagedModelViewSet(viewsets.ModelViewSet):
|
|
|
|
@detail_route()
|
|
def id(self, request, pk=None):
|
|
"""
|
|
Get by id (api/v1/router/{pk}/id/)
|
|
"""
|
|
self.queryset = get_object_or_404(self.queryset.filter(id=pk))
|
|
serializer = self.get_serializer(self.queryset)
|
|
return Response(serializer.data)
|
|
|
|
def dispatch(self, request, *arg, **kwargs):
|
|
res = super(RightManagedModelViewSet,
|
|
self).dispatch(request, *arg, **kwargs)
|
|
obj = self.queryset
|
|
user = self.request.user
|
|
try:
|
|
if (request.method == 'GET' and can_view(obj, user)):
|
|
return res
|
|
elif (request.method != 'GET' and can_edit(obj, user)):
|
|
return res
|
|
except: pass # To prevent bug with Anonymous user
|
|
raise PermissionDenied
|
|
|
|
|
|
from .api import *
|
|
from .serializers import * |