nofusscomputing/centurion_erp
1
0
Fork 0
Code Issues Wiki Activity

test(api): AuthToken ViewSet checks

Browse Source 
ref: #650 #649
This commit is contained in:
Jon Lockwood
2025-02-26 00:03:29 +09:30
parent 1372609e83
commit 04ffe056ae
2 changed files with 407 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
app/access/mixins/permissions.py
View File

@ -5,7 +5,7 @@ from django.core.exceptions import ObjectDoesNotExist
from rest_framework import exceptions
from rest_framework.permissions import DjangoObjectPermissions
from access.models.tenancy import TenancyObject
from access.models.tenancy import Organization, TenancyObject
from core import exceptions as centurion_exceptions
@ -116,15 +116,27 @@ class OrganizationPermissionMixin(
try:
if (
view.model.__name__ == 'UserSettings'
and request._user.id == int(view.kwargs.get('pk', 0))
(
view.model.__name__ == 'UserSettings'
and request._user.id == int(view.kwargs.get('pk', 0))
)
or (
view.model.__name__ == 'AuthToken'
and request._user.id == int(view.kwargs.get('model_id', 0))
)
):
return True
elif (
view.model.__name__ == 'UserSettings'
and request._user.id != int(view.kwargs.get('pk', 0))
(
view.model.__name__ == 'UserSettings'
and request._user.id != int(view.kwargs.get('pk', 0))
)
or (
view.model.__name__ == 'AuthToken'
and request._user.id != int(view.kwargs.get('model_id', 0))
)
):
@ -271,8 +283,14 @@ class OrganizationPermissionMixin(
if (
view.model.__name__ == 'UserSettings'
and request._user.id == int(view.kwargs.get('pk', 0))
(
view.model.__name__ == 'UserSettings'
and request._user.id == int(view.kwargs.get('pk', 0))
)
or (
view.model.__name__ == 'AuthToken'
and request._user.id == int(view.kwargs.get('model_id', 0))
)
):
return True