merge regionalisation

[auf_rh_dae.git] / project / dae / permissions.py

from auf.django.permissions import allow

from project.dae import models as dae
from project.dae.decorators import user_in_dae_groupes
from project.dae.groups import grp_drh, grp_drh2, grp_haute_direction


def user_in_group(*groups):
    def test(user, obj):
        user_groups = set(user.groups.all())
        return any(g in user_groups for g in groups)
    return test


allow(
    'modifier_dae_numerisee',
    dae.Dossier,
    user_in_group(grp_drh, grp_drh2, grp_haute_direction)
)

allow(
    'consulter',
    dae.Dossier,
    lambda user, obj: (
        user_in_dae_groupes(user) or
        dae.Dossier.objects.ma_region_ou_service(user)
        .filter(id=obj.id).exists()
    )
)