[#3302] lien poste sur organig + reorg perm reg

[auf_rh_dae.git] / project / permissions.py

# -*- encoding: utf-8 -*

from project import groups
from project.groups import get_employe_from_user
from project.decorators import in_drh_or_admin

from rh import models as rh

def user_gere_obj_de_sa_region(user):
    user_groups = user.groups.all()
    if groups.grp_correspondants_rh in user_groups or \
            groups.grp_administrateurs in user_groups or \
            groups.grp_directeurs_bureau in user_groups:
        return True
    return False

def user_can_add_obj(user):
    if user_gere_obj_de_sa_region(user) or \
            in_drh_or_admin(user):
        return True
    return False

def user_can_change_obj(user, obj):
    if in_drh_or_admin(user) or (
            user_gere_obj_de_sa_region(user) and \
            obj_in_region_user(user, obj)):
        return True
    return False
    
def user_can_delete_obj(user, obj):
    return in_drh_or_admin(user)
    
# helpers
def obj_in_region_user(user, obj):
    region_user = get_region_user(user)
    if isinstance(obj, rh.Employe):
        return True
    if isinstance(obj, rh.Dossier):
        return True
    if isinstance(obj, rh.Poste):
        return obj.implantation.region == region_user
    return False
    
def get_region_user(user):
    # gère actuellement qu'une seule région par user
    employe = get_employe_from_user(user)
    region_user = employe.implantation.region
    return region_user