fix test group

[auf_rh_dae.git] / project / dae / permissions.py

from auf.django.permissions import allow

from project import groups
from project.dae import models as dae
from project.dae.decorators import user_in_dae_groupes


def user_in_group(*groups):
    def test(user, obj):
        user_groups = set([g.name for g in user.groups.all()])
        return any(g in user_groups for g in groups)
    return test


allow(
    'modifier_dae_numerisee',
    dae.Dossier,
    user_in_group(groups.DRH_NIVEAU_1, groups.DRH_NIVEAU_2,
        groups.HAUTE_DIRECTION)
)

allow(
    'consulter',
    dae.Dossier,
    lambda user, obj: (
        user_in_dae_groupes(user) or
        dae.Dossier.objects.ma_region_ou_service(user)
        .filter(id=obj.id).exists()
    )
)