feat(development): Add function to filter permissions to those used by centurion
ref: #244 #164
This commit is contained in:
@ -1,13 +1,13 @@
|
|||||||
from django import forms
|
from django import forms
|
||||||
from django.contrib.auth.models import Permission
|
|
||||||
from django.db.models import Q
|
from django.db.models import Q
|
||||||
from django.forms import inlineformset_factory
|
from django.forms import inlineformset_factory
|
||||||
|
|
||||||
from app import settings
|
|
||||||
|
|
||||||
from .team_users import TeamUsersForm, TeamUsers
|
from .team_users import TeamUsersForm, TeamUsers
|
||||||
|
|
||||||
from access.models import Team
|
from access.models import Team
|
||||||
|
from access.functions import permissions
|
||||||
|
|
||||||
|
from app import settings
|
||||||
|
|
||||||
from core.forms.common import CommonModelForm
|
from core.forms.common import CommonModelForm
|
||||||
|
|
||||||
@ -66,38 +66,4 @@ class TeamForm(CommonModelForm):
|
|||||||
|
|
||||||
self.fields['permissions'].widget.attrs = {'style': "height: 200px;"}
|
self.fields['permissions'].widget.attrs = {'style': "height: 200px;"}
|
||||||
|
|
||||||
apps = [
|
self.fields['permissions'].queryset = permissions.permission_queryset()
|
||||||
'access',
|
|
||||||
'assistance',
|
|
||||||
'config_management',
|
|
||||||
'core',
|
|
||||||
'django_celery_results',
|
|
||||||
'itam',
|
|
||||||
'settings',
|
|
||||||
]
|
|
||||||
|
|
||||||
exclude_models = [
|
|
||||||
'appsettings',
|
|
||||||
'chordcounter',
|
|
||||||
'groupresult',
|
|
||||||
'organization'
|
|
||||||
'settings',
|
|
||||||
'usersettings',
|
|
||||||
]
|
|
||||||
|
|
||||||
exclude_permissions = [
|
|
||||||
'add_organization',
|
|
||||||
'add_taskresult',
|
|
||||||
'change_organization',
|
|
||||||
'change_taskresult',
|
|
||||||
'delete_organization',
|
|
||||||
'delete_taskresult',
|
|
||||||
]
|
|
||||||
|
|
||||||
self.fields['permissions'].queryset = Permission.objects.filter(
|
|
||||||
content_type__app_label__in=apps,
|
|
||||||
).exclude(
|
|
||||||
content_type__model__in=exclude_models
|
|
||||||
).exclude(
|
|
||||||
codename__in = exclude_permissions
|
|
||||||
)
|
|
||||||
|
45
app/access/functions/permissions.py
Normal file
45
app/access/functions/permissions.py
Normal file
@ -0,0 +1,45 @@
|
|||||||
|
from django.contrib.auth.models import Permission
|
||||||
|
|
||||||
|
def permission_queryset():
|
||||||
|
"""Filter Permissions to those used within the application
|
||||||
|
|
||||||
|
Returns:
|
||||||
|
list: Filtered queryset that only contains the used permissions
|
||||||
|
"""
|
||||||
|
|
||||||
|
apps = [
|
||||||
|
'access',
|
||||||
|
'assistance',
|
||||||
|
'config_management',
|
||||||
|
'core',
|
||||||
|
'django_celery_results',
|
||||||
|
'itam',
|
||||||
|
'itim',
|
||||||
|
'settings',
|
||||||
|
]
|
||||||
|
|
||||||
|
exclude_models = [
|
||||||
|
'appsettings',
|
||||||
|
'chordcounter',
|
||||||
|
'groupresult',
|
||||||
|
'organization'
|
||||||
|
'settings',
|
||||||
|
'usersettings',
|
||||||
|
]
|
||||||
|
|
||||||
|
exclude_permissions = [
|
||||||
|
'add_organization',
|
||||||
|
'add_taskresult',
|
||||||
|
'change_organization',
|
||||||
|
'change_taskresult',
|
||||||
|
'delete_organization',
|
||||||
|
'delete_taskresult',
|
||||||
|
]
|
||||||
|
|
||||||
|
return Permission.objects.filter(
|
||||||
|
content_type__app_label__in=apps,
|
||||||
|
).exclude(
|
||||||
|
content_type__model__in=exclude_models
|
||||||
|
).exclude(
|
||||||
|
codename__in = exclude_permissions
|
||||||
|
)
|
@ -42,6 +42,8 @@ All models must meet the following requirements:
|
|||||||
|
|
||||||
- `verbose_name_plural`
|
- `verbose_name_plural`
|
||||||
|
|
||||||
|
- If creating a new model, function `access.functions.permissions.permission_queryset()` has been updated to display the models permission(s)
|
||||||
|
|
||||||
|
|
||||||
## History
|
## History
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user