Changements au buildout + settings pour me permettre de builder le projet

[auf_rh_dae.git] / project / permissions.py

# -*- encoding: utf-8 -*

from django.core.cache import cache

from project import groups
from project.groups import get_zones_from_user
from project.decorators import in_drh_or_admin

from rh import models as rh


def get_user_groupnames(user):
    key = "get_user_groupnames_%s" % user.id
    group_names = cache.get(key, None)
    if group_names is not None:
        return group_names.split(',')
    group_names = [g.name for g in user.groups.all()]
    cache.set(key, ",".join(group_names))
    return group_names


def user_gere_obj_de_sa_region(user):
    key = "user_gere_obj_de_sa_region_%s" % user.id
    granted = cache.get(key, None)
    if granted is not None:
        return granted

    user_groups = [g.name for g in user.groups.all()]
    if groups.CORRESPONDANT_RH in user_groups or \
            groups.ADMINISTRATEURS in user_groups or \
            groups.DIRECTEUR_DE_BUREAU in user_groups:
        granted = True
    else:
        granted = False
    cache.set(key, granted)
    return granted


def user_can_add_obj(user):
    if user_gere_obj_de_sa_region(user) or \
            in_drh_or_admin(user):
        return True
    return False


def user_can_list_obj(user):
    if user_gere_obj_de_sa_region(user) or \
            in_drh_or_admin(user):
        return True
    return False


def user_can_change_obj(user, obj):
    if in_drh_or_admin(user) or (
            user_gere_obj_de_sa_region(user) and
            obj_in_region_user(user, obj)):
        return True
    return False


def user_can_delete_obj(user, obj):
    return in_drh_or_admin(user)


# helpers
def obj_in_region_user(user, obj):
    zones = get_zones_from_user(user)
    if isinstance(obj, rh.Employe):
        return True
    if isinstance(obj, rh.Dossier):
        return True
    if isinstance(obj, rh.Poste):
        return obj.implantation.zone_administrative in zones
    return False