fix for 500 error

[auf_rh_dae.git] / project / permissions.py

# -*- encoding: utf-8 -*

from project import groups
from project.groups import get_employe_from_user, get_zones_from_user
from project.decorators import in_drh_or_admin

from auf.django.references import models as ref
from rh import models as rh

def user_gere_obj_de_sa_region(user):
    user_groups = [g.name for g in user.groups.all()]
    if groups.CORRESPONDANT_RH in user_groups or \
            groups.ADMINISTRATEURS in user_groups or \
            groups.DIRECTEUR_DE_BUREAU in user_groups:
        return True
    return False

def user_can_add_obj(user):
    if user_gere_obj_de_sa_region(user) or \
            in_drh_or_admin(user):
        return True
    return False

def user_can_list_obj(user):
    if user_gere_obj_de_sa_region(user) or \
            in_drh_or_admin(user):
        return True
    return False

def user_can_change_obj(user, obj):
    if in_drh_or_admin(user) or (
            user_gere_obj_de_sa_region(user) and \
            obj_in_region_user(user, obj)):
        return True
    return False
    
def user_can_delete_obj(user, obj):
    return in_drh_or_admin(user)
    

# helpers
def obj_in_region_user(user, obj):
    zones = get_zones_from_user(user)
    if isinstance(obj, rh.Employe):
        return True
    if isinstance(obj, rh.Dossier):
        return True
    if isinstance(obj, rh.Poste):
        return obj.implantation.zone_administrative in zones
    return False