Permission to app file #128 #129 #130

ailsoncgt
1 parent b3d2cb1d
Showing 2 changed files with 23 additions and 1 deletions Show diff stats
files/permissions.py
files/views.py
@@ -0,0 +1,22 @@
+from rolepermissions.permissions import register_object_checker
+from amadeus.roles import SystemAdmin
+
+@register_object_checker()
+def edit_file(role, user, file):
+    if (role == SystemAdmin):
+        return True
+
+    if (user in file.topic.subject.professors.all()):
+        return True
+
+    return False
+
+@register_object_checker()
+def delete_file(role, user, file):
+    if (role == SystemAdmin):
+        return True
+
+    if (user in file.topic.subject.professors.all()):
+        return True
+
+    return False
 \ No newline at end of file
@@ -181,7 +181,7 @@ class UpdateFile(LoginRequiredMixin, HasRoleMixin, LogMixin, generic.UpdateView)
  
 	def dispatch(self, *args, **kwargs):
 		file = get_object_or_404(TopicFile, slug = self.kwargs.get('slug'))
-		if(not has_object_permission('edit_file', self.request.user, file) or not(self.request.user in file.topic.subject.professors.all())):
+		if(not has_object_permission('edit_file', self.request.user, file) and not(self.request.user in file.topic.subject.professors.all())):
 			return self.handle_no_permission()
 		return super(UpdateFile, self).dispatch(*args, **kwargs)
...	...	@@ -0,0 +1,22 @@
	1	+from rolepermissions.permissions import register_object_checker
	2	+from amadeus.roles import SystemAdmin
	3	+
	4	+@register_object_checker()
	5	+def edit_file(role, user, file):
	6	+ if (role == SystemAdmin):
	7	+ return True
	8	+
	9	+ if (user in file.topic.subject.professors.all()):
	10	+ return True
	11	+
	12	+ return False
	13	+
	14	+@register_object_checker()
	15	+def delete_file(role, user, file):
	16	+ if (role == SystemAdmin):
	17	+ return True
	18	+
	19	+ if (user in file.topic.subject.professors.all()):
	20	+ return True
	21	+
	22	+ return False
0	23	\ No newline at end of file
...	...
...	...	@@ -181,7 +181,7 @@ class UpdateFile(LoginRequiredMixin, HasRoleMixin, LogMixin, generic.UpdateView)
181	181
182	182	def dispatch(self, args, *kwargs):
183	183	file = get_object_or_404(TopicFile, slug = self.kwargs.get('slug'))
184		- if(not has_object_permission('edit_file', self.request.user, file) or not(self.request.user in file.topic.subject.professors.all())):
	184	+ if(not has_object_permission('edit_file', self.request.user, file) and not(self.request.user in file.topic.subject.professors.all())):
185	185	return self.handle_no_permission()
186	186	return super(UpdateFile, self).dispatch(args, *kwargs)
187	187
...	...