|
|
|
@ -12,7 +12,7 @@ from accounts.forms import LoginForm, RegisterForm, UserChangePasswordForm, User
|
|
|
|
from accounts.models import DepotUser
|
|
|
|
from accounts.models import DepotUser
|
|
|
|
|
|
|
|
|
|
|
|
from django.contrib.auth.decorators import login_required, user_passes_test
|
|
|
|
from django.contrib.auth.decorators import login_required, user_passes_test
|
|
|
|
from django.contrib.auth.mixins import AccessMixin, LoginRequiredMixin
|
|
|
|
from django.contrib.auth.mixins import AccessMixin, LoginRequiredMixin, UserPassesTestMixin
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# Create your views here.
|
|
|
|
# Create your views here.
|
|
|
|
@ -28,27 +28,21 @@ class DepotLoginView(LoginView):
|
|
|
|
def is_company_admin(user):
|
|
|
|
def is_company_admin(user):
|
|
|
|
return user.is_authenticated and user.is_company_admin
|
|
|
|
return user.is_authenticated and user.is_company_admin
|
|
|
|
|
|
|
|
|
|
|
|
@method_decorator(login_required, name='dispatch')
|
|
|
|
|
|
|
|
class RegisterView(AccessMixin, FormView):
|
|
|
|
class RegisterView(LoginRequiredMixin, UserPassesTestMixin, FormView):
|
|
|
|
template_name = 'registration/register.html'
|
|
|
|
template_name = 'registration/register.html'
|
|
|
|
form_class = RegisterForm
|
|
|
|
form_class = RegisterForm
|
|
|
|
# model = get_user_model()
|
|
|
|
|
|
|
|
success_url = reverse_lazy('dashboard')
|
|
|
|
success_url = reverse_lazy('dashboard')
|
|
|
|
|
|
|
|
|
|
|
|
def dispatch(self, request, *args, **kwargs):
|
|
|
|
def test_func(self):
|
|
|
|
user: DepotUser = request.user
|
|
|
|
user = self.request.user
|
|
|
|
|
|
|
|
return user.is_superuser or user.user_type == DepotUser.UserType.COMPANY_ADMIN
|
|
|
|
if not (user.is_superuser or user.user_type == DepotUser.UserType.COMPANY_ADMIN):
|
|
|
|
|
|
|
|
return self.handle_no_permission()
|
|
|
|
|
|
|
|
return super().dispatch(request, *args, **kwargs)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def form_valid(self, form):
|
|
|
|
def form_valid(self, form):
|
|
|
|
# Create user from form data
|
|
|
|
|
|
|
|
user = form.save(commit=False)
|
|
|
|
user = form.save(commit=False)
|
|
|
|
user_type = form.cleaned_data['user_type']
|
|
|
|
user_type = form.cleaned_data['user_type']
|
|
|
|
user.save()
|
|
|
|
user.save()
|
|
|
|
|
|
|
|
|
|
|
|
# Clear irrelevant permissions based on user type
|
|
|
|
|
|
|
|
if user_type == DepotUser.UserType.CLIENT:
|
|
|
|
if user_type == DepotUser.UserType.CLIENT:
|
|
|
|
user.employee_permissions.clear()
|
|
|
|
user.employee_permissions.clear()
|
|
|
|
user.company_permissions.set(form.cleaned_data['company_permissions'])
|
|
|
|
user.company_permissions.set(form.cleaned_data['company_permissions'])
|
|
|
|
@ -90,17 +84,15 @@ class RegisterView(AccessMixin, FormView):
|
|
|
|
|
|
|
|
|
|
|
|
return form
|
|
|
|
return form
|
|
|
|
|
|
|
|
|
|
|
|
class UserListView(ListView):
|
|
|
|
class UserListView(LoginRequiredMixin, UserPassesTestMixin, ListView):
|
|
|
|
template_name = 'registration/user-list.html'
|
|
|
|
template_name = 'registration/user-list.html'
|
|
|
|
model = get_user_model()
|
|
|
|
model = get_user_model()
|
|
|
|
context_object_name = 'objects'
|
|
|
|
context_object_name = 'objects'
|
|
|
|
paginate_by = 20 # Number of containers per page
|
|
|
|
paginate_by = 20
|
|
|
|
# base_template = 'employee-base.html'
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# def get_context_data(self, **kwargs):
|
|
|
|
def test_func(self):
|
|
|
|
# context = super().get_context_data(**kwargs)
|
|
|
|
user = self.request.user
|
|
|
|
# context['base_template'] = self.base_template
|
|
|
|
return user.is_superuser or user.user_type == DepotUser.UserType.COMPANY_ADMIN
|
|
|
|
# return context
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def get_queryset(self):
|
|
|
|
def get_queryset(self):
|
|
|
|
queryset = super().get_queryset()
|
|
|
|
queryset = super().get_queryset()
|
|
|
|
@ -111,7 +103,6 @@ class UserListView(ListView):
|
|
|
|
if data_filter != 'all':
|
|
|
|
if data_filter != 'all':
|
|
|
|
queryset = queryset.filter(is_active=True)
|
|
|
|
queryset = queryset.filter(is_active=True)
|
|
|
|
|
|
|
|
|
|
|
|
# Filter users based on permissions
|
|
|
|
|
|
|
|
if user.is_superuser:
|
|
|
|
if user.is_superuser:
|
|
|
|
return queryset.all()
|
|
|
|
return queryset.all()
|
|
|
|
elif user.user_type == DepotUser.UserType.COMPANY_ADMIN:
|
|
|
|
elif user.user_type == DepotUser.UserType.COMPANY_ADMIN:
|
|
|
|
@ -119,18 +110,15 @@ class UserListView(ListView):
|
|
|
|
else:
|
|
|
|
else:
|
|
|
|
return queryset.none()
|
|
|
|
return queryset.none()
|
|
|
|
|
|
|
|
|
|
|
|
class UserUpdateView(UpdateView):
|
|
|
|
class UserUpdateView(LoginRequiredMixin, UserPassesTestMixin, UpdateView):
|
|
|
|
template_name = 'registration/register.html'
|
|
|
|
template_name = 'registration/register.html'
|
|
|
|
form_class = UserEditForm
|
|
|
|
form_class = UserEditForm
|
|
|
|
model = get_user_model()
|
|
|
|
model = get_user_model()
|
|
|
|
success_url = reverse_lazy('user_list')
|
|
|
|
success_url = reverse_lazy('user_list')
|
|
|
|
|
|
|
|
|
|
|
|
def dispatch(self, request, *args, **kwargs):
|
|
|
|
def test_func(self):
|
|
|
|
user: DepotUser = request.user
|
|
|
|
user = self.request.user
|
|
|
|
|
|
|
|
return user.is_superuser or user.user_type == DepotUser.UserType.COMPANY_ADMIN
|
|
|
|
if not (user.is_superuser or user.user_type == DepotUser.UserType.COMPANY_ADMIN):
|
|
|
|
|
|
|
|
return self.handle_no_permission()
|
|
|
|
|
|
|
|
return super().dispatch(request, *args, **kwargs)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def form_valid(self, form):
|
|
|
|
def form_valid(self, form):
|
|
|
|
user = form.save(commit=False)
|
|
|
|
user = form.save(commit=False)
|
|
|
|
@ -175,14 +163,16 @@ class UserUpdateView(UpdateView):
|
|
|
|
|
|
|
|
|
|
|
|
return form
|
|
|
|
return form
|
|
|
|
|
|
|
|
|
|
|
|
class UserActiveView(LoginRequiredMixin, View):
|
|
|
|
class UserActiveView(LoginRequiredMixin, UserPassesTestMixin, View):
|
|
|
|
success_url = reverse_lazy('user_list')
|
|
|
|
success_url = reverse_lazy('user_list')
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_func(self):
|
|
|
|
|
|
|
|
user = self.request.user
|
|
|
|
|
|
|
|
return user.is_superuser or user.user_type == DepotUser.UserType.COMPANY_ADMIN
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def post(self, request, pk, *args, **kwargs):
|
|
|
|
def post(self, request, pk, *args, **kwargs):
|
|
|
|
user = request.user
|
|
|
|
user = request.user
|
|
|
|
if not (user.is_superuser or getattr(user, 'user_type', None) == DepotUser.UserType.COMPANY_ADMIN):
|
|
|
|
|
|
|
|
return HttpResponseForbidden("You do not have permission to perform this action.")
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
target_user = get_object_or_404(get_user_model(), pk=pk)
|
|
|
|
target_user = get_object_or_404(get_user_model(), pk=pk)
|
|
|
|
if target_user == user:
|
|
|
|
if target_user == user:
|
|
|
|
return HttpResponseForbidden("You cannot change your own active status.")
|
|
|
|
return HttpResponseForbidden("You cannot change your own active status.")
|
|
|
|
@ -192,7 +182,7 @@ class UserActiveView(LoginRequiredMixin, View):
|
|
|
|
return JsonResponse({'success': True, 'is_active': target_user.is_active})
|
|
|
|
return JsonResponse({'success': True, 'is_active': target_user.is_active})
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
class CustomPasswordChangeView(PasswordChangeView):
|
|
|
|
class CustomPasswordChangeView(LoginRequiredMixin, PasswordChangeView):
|
|
|
|
template_name = 'registration/change_password.html'
|
|
|
|
template_name = 'registration/change_password.html'
|
|
|
|
|
|
|
|
|
|
|
|
def get_success_url(self):
|
|
|
|
def get_success_url(self):
|
|
|
|
|
