Files
RasadDam_Backend/apps/authorization/api/v1/api.py

73 lines
2.1 KiB
Python

from rest_framework_simplejwt.authentication import JWTAuthentication
from rest_framework.permissions import AllowAny, IsAuthenticated
from rest_framework.exceptions import APIException
from apps.authorization.api.v1.serializers import (
RoleSerializer,
PermissionSerializer,
UserRelationSerializer,
PageSerializer
)
from rest_framework.decorators import action
from rest_framework.response import Response
from apps.authorization.models import (
Role,
Permissions,
UserRelations,
Page
)
from rest_framework import viewsets
from django.db import transaction
from rest_framework import filters
from rest_framework import status
class RoleViewSet(viewsets.ModelViewSet):
""" Crud Operations For User Roles """
queryset = Role.objects.all()
serializer_class = RoleSerializer
class PageViewSet(viewsets.ModelViewSet):
""" add website pages to system to set permission on it """
queryset = Page.objects.all()
serializer_class = PageSerializer
filter_backends = [filters.SearchFilter]
search_fields = ['name', 'code']
@action(
methods=['delete'],
detail=True,
url_name='delete',
url_path='delete',
name='delete'
)
@transaction.atomic
def delete(self, request, pk=None):
""" Full delete of page & permissions of page object """
try:
page = self.queryset.get(id=pk)
permissions = Permissions.objects.filter(page=page)
permissions.delete()
page.delete()
return Response(status=status.HTTP_200_OK)
except APIException as e:
return Response(e, status=status.HTTP_204_NO_CONTENT)
class PermissionViewSet(viewsets.ModelViewSet):
""" Crud Operations for Permissions """
queryset = Permissions.objects.all()
serializer_class = PermissionSerializer
filter_backends = [filters.SearchFilter]
search_fields = ['page__name', ]
class UserRelationViewSet(viewsets.ModelViewSet):
""" Crud Operations for User Relations """
queryset = UserRelations.objects.all()
serializer_class = UserRelationSerializer