depot_django/accounts/views.py

from django.contrib.auth import get_user_model
from django.contrib.auth.views import LoginView
from django.http import HttpResponseForbidden, JsonResponse
from django.shortcuts import render
from django.urls import reverse_lazy
from django.utils.decorators import method_decorator
from django.views import View
from django.views.generic import TemplateView, FormView, ListView, UpdateView
from rest_framework.generics import get_object_or_404

from accounts.forms import LoginForm, RegisterForm, UserChangePasswordForm
from accounts.models import DepotUser

from django.contrib.auth.decorators import login_required, user_passes_test
from django.contrib.auth.mixins import AccessMixin, LoginRequiredMixin


# Create your views here.


class DepotLoginView(LoginView):
    template_name = 'registration/login.html'
    # success_url = reverse_lazy('dashboard')
    form_class = LoginForm
    next_page = reverse_lazy('dashboard')


def is_company_admin(user):
    return user.is_authenticated and user.is_company_admin

@method_decorator(login_required, name='dispatch')
class RegisterView(AccessMixin, FormView):
    template_name = 'registration/register.html'
    form_class = RegisterForm
    # model = get_user_model()
    success_url = reverse_lazy('dashboard')

    def dispatch(self, request, *args, **kwargs):
        user: DepotUser = request.user

        if not (user.is_superuser or user.user_type == DepotUser.UserType.COMPANY_ADMIN):
            return self.handle_no_permission()
        return super().dispatch(request, *args, **kwargs)

    def form_valid(self, form):
        # Create user from form data
        user = form.save(commit=False)
        user_type = form.cleaned_data['user_type']
        user.save()

        # Clear irrelevant permissions based on user type
        if user_type == DepotUser.UserType.CLIENT:
            user.employee_permissions.clear()
            user.company_permissions.set(form.cleaned_data['company_permissions'])
        elif user_type == DepotUser.UserType.EMPLOYEE:
            user.company_permissions.clear()
            user.employee_permissions.set(form.cleaned_data['employee_permissions'])

        return super().form_valid(form)

    def get_form(self, form_class = None):
        form = super().get_form(form_class)
        user: DepotUser = self.request.user

        if user.is_superuser:
            # Superuser can manage all permissions and user types
            form.fields['user_type'].widget.attrs['disabled'] = False
            form.fields['company_permissions'].widget.attrs['disabled'] = False
            form.fields['employee_permissions'].widget.attrs['disabled'] = False

            # Show relevant permissions based on selected user type
            if form.initial.get('user_type') == DepotUser.UserType.CLIENT:
                form.fields['employee_permissions'].widget.attrs['disabled'] = True
            elif form.initial.get('user_type') == DepotUser.UserType.EMPLOYEE:
                form.fields['company_permissions'].widget.attrs['disabled'] = True

        elif user.user_type == DepotUser.UserType.COMPANY_ADMIN:
            form.fields['company'].queryset = form.fields['company'].queryset.filter(pk=user.company.pk)
            form.fields['company'].initial = user.company
            form.fields['company'].widget.readonly = True  # form.fields['line'].widget.attrs['disabled'] = True
            form.fields['line'].queryset = form.fields['line'].queryset.filter(company=user.company.pk)

            form.fields['user_type'].choices = [
                (DepotUser.UserType.CLIENT, 'Client')
            ]
            form.fields['user_type'].initial = DepotUser.UserType.CLIENT

            form.fields['company_permissions'].widget.attrs['disabled'] = False
            form.fields['employee_permissions'].widget.attrs['disabled'] = True

        return form

class UserListView(ListView):
    template_name = 'registration/user-list.html'
    model = get_user_model()
    context_object_name = 'objects'
    paginate_by = 30  # Number of containers per page
    # base_template = 'employee-base.html'

    # def get_context_data(self, **kwargs):
    #     context = super().get_context_data(**kwargs)
    #     context['base_template'] = self.base_template
    #     return context

    def get_queryset(self):
        queryset = super().get_queryset()
        user = self.request.user

        data_filter = self.request.GET.get('filter')

        if data_filter != 'all':
            queryset = queryset.filter(is_active=True)

        # Filter users based on permissions
        if user.is_superuser:
            return queryset.all()
        elif user.user_type == DepotUser.UserType.COMPANY_ADMIN:
            return queryset.filter(company=user.company)
        else:
            return queryset.none()

class UserUpdateView(UpdateView):
    template_name = 'registration/register.html'
    form_class = RegisterForm
    model = get_user_model()
    success_url = reverse_lazy('user_list')

    def dispatch(self, request, *args, **kwargs):
        user: DepotUser = request.user

        if not (user.is_superuser or user.user_type == DepotUser.UserType.COMPANY_ADMIN):
            return self.handle_no_permission()
        return super().dispatch(request, *args, **kwargs)

    def form_valid(self, form):
        user = form.save(commit=False)
        user_type = form.cleaned_data['user_type']
        user.save()
        # Clear irrelevant permissions based on user type
        if user_type == DepotUser.UserType.CLIENT:
            user.employee_permissions.clear()
            user.company_permissions.set(form.cleaned_data['company_permissions'])
        elif user_type == DepotUser.UserType.EMPLOYEE:
            user.company_permissions.clear()
            user.employee_permissions.set(form.cleaned_data['employee_permissions'])
        return super().form_valid(form)

    def get_form(self, form_class = None):
        form = super().get_form(form_class)
        user: DepotUser = self.request.user

        if user.is_superuser:
            # Superuser can manage all permissions and user types
            form.fields['user_type'].widget.attrs['disabled'] = False
            form.fields['company_permissions'].widget.attrs['disabled'] = False
            form.fields['employee_permissions'].widget.attrs['disabled'] = False

            # Show relevant permissions based on selected user type
            if form.initial.get('user_type') == DepotUser.UserType.CLIENT:
                form.fields['employee_permissions'].widget.attrs['disabled'] = True
            elif form.initial.get('user_type') == DepotUser.UserType.EMPLOYEE:
                form.fields['company_permissions'].widget.attrs['disabled'] = True

        elif user.user_type == DepotUser.UserType.COMPANY_ADMIN:
            form.fields['company'].queryset = form.fields['company'].queryset.filter(pk=user.company.pk)
            form.fields['company'].initial = user.company
            form.fields['company'].widget.readonly = True
            form.fields['line'].queryset = form.fields['line'].queryset.filter(company=user.company.pk)
            form.fields['user_type'].choices = [
                (DepotUser.UserType.CLIENT, 'Client')
            ]
            form.fields['user_type'].initial = DepotUser.UserType.CLIENT
            form.fields['company_permissions'].widget.attrs['disabled'] = False
            form.fields['employee_permissions'].widget.attrs['disabled'] = True

        return form

class UserActiveView(LoginRequiredMixin, View):
    success_url = reverse_lazy('user_list')

    def post(self, request, pk, *args, **kwargs):
        user = request.user
        if not (user.is_superuser or getattr(user, 'user_type', None) == DepotUser.UserType.COMPANY_ADMIN):
            return HttpResponseForbidden("You do not have permission to perform this action.")

        target_user = get_object_or_404(get_user_model(), pk=pk)
        if target_user == user:
            return HttpResponseForbidden("You cannot change your own active status.")

        target_user.is_active = not target_user.is_active
        target_user.save()
        return JsonResponse({'success': True, 'is_active': target_user.is_active})


class UserChangePasswordView(LoginRequiredMixin, View):
    template_name = 'registration/change_password.html'
    form_class = UserChangePasswordForm
    success_url = reverse_lazy('home')