feat(access): Filter history permissions

ref: #873 #875 closes #643

Release-Notes.md

@@ -5,11 +5,17 @@
     !!! info
         Migration of the old history tables to the new history tables occurs as part of post migration. As such the time it will take to migrate the history is dependent upon how many history entries per model. This should be planned for when upgrading to this version. if for some reason the migration is interrupted, you can safely restart it again by running the migrate command.
 
+    !!! note
+        Permission migration from the old history models to the new Audit History models are not migrated. As such users whom used to be able to access history models will need to be granted the required permission to view the new Audit History models
+
 - Added new model for notes
 
     !!! info
         Migration of the old notes tables to the new note tables occurs as part of post migration. As such the time it will take to migrate the history is dependent upon how many history entries per model. This should be planned for when upgrading to this version. if for some reason the migration is interrupted, you can safely restart it again by running the migrate command.
 
+    !!! note
+        Permission migration from the old history models to the new Centurion Notes models are not migrated. As such users whom used to be able to access notes models will need to be granted the required permission to view the new Centurion Notes models
+
 - Removed Django UI
 
     [UI](https://github.com/nofusscomputing/centurion_erp) must be deployed seperatly.

app/access/functions/permissions.py

@@ -1,4 +1,10 @@
-from django.contrib.auth.models import Permission
+from django.apps import apps
+from django.contrib.auth.models import (
+    ContentType,
+    Permission
+)
+from django.conf import settings
+
 
 def permission_queryset():
     """Filter Permissions to those used within the application
@@ -7,7 +13,7 @@ def permission_queryset():
         list: Filtered queryset that only contains the used permissions
     """
 
-    apps = [
+    centurion_apps = [
         'access',
         'accounting',
         'assistance',
@@ -52,10 +58,50 @@ def permission_queryset():
         'view_history',
     ]
 
+
+    if not settings.RUNNING_TESTS:
+
+        models = apps.get_models()
+
+        for model in models:
+
+            if(
+                not str(model._meta.object_name).endswith('AuditHistory')
+                and not str(model._meta.model_name).lower().endswith('history')
+            ):
+                # check `endswith('history')` can be removed when the old history models are removed
+                continue
+
+            content_type = ContentType.objects.get(
+                app_label = model._meta.app_label,
+                model = model._meta.model_name
+            )
+
+            permissions = Permission.objects.filter(
+                content_type = content_type,
+            )
+
+            for permission in permissions:
+
+                if(
+                    not permission.codename == 'view_' + str(model._meta.model_name)
+                    and str(model._meta.object_name).endswith('AuditHistory')
+                ):
+                    exclude_permissions += [ permission.codename ]
+
+                elif(
+                    not str(model._meta.object_name).endswith('AuditHistory')
+                    and str(model._meta.model_name).lower().endswith('history')
+                ):
+                    # This `elif` can be removed when the old history models are removed
+
+                    exclude_permissions += [ permission.codename ]
+
+
     return Permission.objects.select_related('content_type').filter(
-            content_type__app_label__in=apps,
+            content_type__app_label__in = centurion_apps,
         ).exclude(
-            content_type__model__in=exclude_models
+            content_type__model__in = exclude_models
         ).exclude(
             codename__in = exclude_permissions
         )