Changeset 7431d13

Timestamp:

Nov 17, 2013, 3:59:33 AM (12 years ago)

Author:

Alex Dehnert <adehnert@…>

Branches:

master, stable, stage

Children:

88843ac

Parents:

00ec3e4

git-author:

Alex Dehnert <adehnert@…> (11/17/13 03:55:11)

git-committer:

Alex Dehnert <adehnert@…> (11/17/13 03:59:33)

Message:

Add Group.admin_groups method (ASA-#181)

This adds a Group.admin_groups method, which can be used to find the groups
that a user is an admin of (where "admin" is defined as "has a specified
permission [default: admin_group] via an OfficerRole?).

File:

• asadb/groups/models.py (modified) (6 diffs)

asadb/groups/models.py

@@ +1 @@
+import collections
 import datetime
 import filecmp
@@ -14 +15 @@
 from django.db.models import Q
 from django.core.validators import RegexValidator
-from django.contrib.auth.models import User
+from django.contrib.auth.models import User, Permission
+from django.contrib.contenttypes.models import ContentType
 from django.template.defaultfilters import slugify
 
@@ -112 +114 @@
         current_officers = OfficeHolder.current_holders.filter(person=username)
         users_groups = Group.objects.filter(officeholder__in=current_officers).distinct()
+
+    @staticmethod
+    def admin_groups(username, codename='admin_group'):
+        holders = OfficeHolder.current_holders.filter_perm(codename=codename).filter(person=username)
+        users_groups = Group.objects.filter(officeholder__in=holders).distinct()
         return users_groups
 
@@ -395 +402 @@
 
     @classmethod
+    def getRolesGrantingPerm(cls, perm=None, model=Group, codename=None, ):
+        """Get all OfficerRole objects granting a permission
+
+        Either `perm` or `codename` must be supplied, but not both. If
+        `codename` is provided (and `perm` is None), then `perm` the
+        permission corresponding to `model` (default: `Group`) and `codename`
+        will be found and used."""
+
+        if perm is None:
+            ct = ContentType.objects.get_for_model(model)
+            print ct
+            print Permission.objects.filter(content_type=ct)
+            perm = Permission.objects.get(content_type=ct, codename=codename)
+
+        Q_user = Q(user_permissions=perm)
+        Q_group = Q(groups__permissions=perm)
+        users = User.objects.filter(Q_user|Q_group)
+        roles = cls.objects.filter(grant_user__in=users)
+        return roles
+
+    @classmethod
     def retrieve(cls, slug, ):
         return cls.objects.get(slug=slug)
+
 reversion.register(OfficerRole)
 
@@ -407 +436 @@
         )
 
+    def filter_perm(self, perm=None, model=Group, codename=None, ):
+        roles = OfficerRole.getRolesGrantingPerm(perm=perm, model=model, codename=codename)
+        return self.get_query_set().filter(role__in=roles)
+
 class OfficeHolder(models.Model):
     EXPIRE_OFFSET   = datetime.timedelta(seconds=1)
@@ -433 +466 @@
     def __repr__(self, ):
         return str(self)
+
 reversion.register(OfficeHolder)