@ -2,10 +2,50 @@ from rest_framework import viewsets,filters
from rest_framework import status from rest_framework import status
from rest_framework . response import Response from rest_framework . response import Response
from django . core . exceptions import PermissionDenied from django . core . exceptions import PermissionDenied
from rest_framework . permissions import BasePermission , AllowAny
from . import models as m from . import models as m
from . import views from . import views
from seminar . permissions import AllowWrite
class PermissionMixin ( object ) :
""" Redefines get_permissions so that only organizers can make changes. """
def get_permissions ( self ) :
permission_classes = [ ]
print ( " get_permissions have been called. " )
if self . action in [ " create " , " update " , " partial_update " , " destroy " ] :
permission_classes = [ AllowWrite ] # speciální permission na zápis - orgové
else :
permission_classes = [ AllowAny ]
# návštěvník nemusí být zalogován, aby si prohlížel obsah
return [ permission ( ) for permission in permission_classes ]
def verejne_nad ( self , node ) :
""" Returns output of verejne for closest Rocnik, Cislo or Problem above.
( All of them have method verejne . ) """
parent = get_parent ( node )
while True :
rocnik = isinstance ( parent , RocnikNode )
cislo = isinstance ( parent , CisloNode )
problem = isinstance ( parent , ProblemNode )
if ( rocnik or cislo or problem ) :
break
else :
parent = get_parent ( parent )
if rocnik :
return parent . rocnik . verejne ( )
elif cislo :
return parent . cislo . verejne ( )
elif problem :
return parent . problem . verjne ( )
def has_object_permission ( self , request , view , obj ) :
# test that obj is Node
assert isinstance ( obj , Node )
return verejne_nad ( node )
class ReadWriteSerializerMixin ( object ) : class ReadWriteSerializerMixin ( object ) :
""" """
Overrides get_serializer_class to choose the read serializer Overrides get_serializer_class to choose the read serializer
@ -50,17 +90,17 @@ class ReadWriteSerializerMixin(object):
) )
return self . create_serializer_class return self . create_serializer_class
class TextViewSet ( viewsets . ModelViewSet ) : class TextViewSet ( PermissionMixin , viewsets . ModelViewSet ) :
queryset = m . Text . objects . all ( ) queryset = m . Text . objects . all ( )
serializer_class = views . TextSerializer serializer_class = views . TextSerializer
class TextNodeViewSet ( ReadWriteSerializerMixin , viewsets . ModelViewSet ) : class TextNodeViewSet ( PermissionMixin , ReadWriteSerializerMixin , viewsets . ModelViewSet ) :
queryset = m . TextNode . objects . all ( ) queryset = m . TextNode . objects . all ( )
read_serializer_class = views . TextNodeSerializer read_serializer_class = views . TextNodeSerializer
write_serializer_class = views . TextNodeWriteSerializer write_serializer_class = views . TextNodeWriteSerializer
create_serializer_class = views . TextNodeCreateSerializer create_serializer_class = views . TextNodeCreateSerializer
class CastNodeViewSet ( ReadWriteSerializerMixin , viewsets . ModelViewSet ) : class CastNodeViewSet ( PermissionMixin , ReadWriteSerializerMixin , viewsets . ModelViewSet ) :
queryset = m . CastNode . objects . all ( ) queryset = m . CastNode . objects . all ( )
read_serializer_class = views . CastNodeSerializer read_serializer_class = views . CastNodeSerializer
write_serializer_class = views . CastNodeSerializer write_serializer_class = views . CastNodeSerializer
@ -74,7 +114,7 @@ class CastNodeViewSet(ReadWriteSerializerMixin,viewsets.ModelViewSet):
raise PermissionDenied ( ' Nelze smazat CastNode, který má děti! ' ) raise PermissionDenied ( ' Nelze smazat CastNode, který má děti! ' )
class UlohaVzorakNodeViewSet ( viewsets . ModelViewSet ) : class UlohaVzorakNodeViewSet ( PermissionMixin , viewsets . ModelViewSet ) :
serializer_class = views . UlohaVzorakNodeSerializer serializer_class = views . UlohaVzorakNodeSerializer
def get_queryset ( self ) : def get_queryset ( self ) :
