0a1c656865
* chore: user store code refactor * chore: general unauthorized screen asset added * chore: workspace setting sidebar options updated for guest and viewer * chore: NotAuthorizedView component code updated * chore: project setting layout code refactor * chore: workspace setting members and exports page permission validation added * chore: workspace members and exports settings page improvement * chore: project invite modal updated * chore: workspace setting unauthorized access empty state * chore: workspace setting unauthorized access empty state * chore: project settings sidebar permission updated * fix: project settings user role permission updated * chore: app sidebar role permission validation updated * chore: app sidebar role permission validation * chore: disabled page empty state validation * chore: app sidebar add project improvement * chore: guest role changes * fix: user favorite * chore: changed pages permission * chore: guest role changes * fix: app sidebar project item permission * fix: project setting empty state flicker * fix: workspace setting empty state flicker * chore: granted notification permission to viewer * chore: project invite and edit validation updated * chore: favorite validation added for guest and viewer role * chore: create view validation updated * chore: views permission changes * chore: create view empty state validation updated * chore: created ENUM for permissions --------- Co-authored-by: NarayanBavisetti <narayan3119@gmail.com> Co-authored-by: Bavisetti Narayan <72156168+NarayanBavisetti@users.noreply.github.com>
61 lines
2.1 KiB
Python
61 lines
2.1 KiB
Python
from plane.db.models import WorkspaceMember, ProjectMember
|
|
from functools import wraps
|
|
from rest_framework.response import Response
|
|
from rest_framework import status
|
|
|
|
from enum import Enum
|
|
|
|
class ROLE(Enum):
|
|
ADMIN = 20
|
|
MEMBER = 15
|
|
VIEWER = 10
|
|
GUEST = 5
|
|
|
|
|
|
def allow_permission(allowed_roles, level="PROJECT", creator=False, model=None):
|
|
def decorator(view_func):
|
|
@wraps(view_func)
|
|
def _wrapped_view(instance, request, *args, **kwargs):
|
|
|
|
# Check for creator if required
|
|
if creator and model:
|
|
obj = model.objects.filter(
|
|
id=kwargs["pk"], created_by=request.user
|
|
).exists()
|
|
if obj:
|
|
return view_func(instance, request, *args, **kwargs)
|
|
|
|
# Convert allowed_roles to their values if they are enum members
|
|
allowed_role_values = [
|
|
role.value if isinstance(role, ROLE) else role
|
|
for role in allowed_roles
|
|
]
|
|
|
|
# Check role permissions
|
|
if level == "WORKSPACE":
|
|
if WorkspaceMember.objects.filter(
|
|
member=request.user,
|
|
workspace__slug=kwargs["slug"],
|
|
role__in=allowed_role_values,
|
|
is_active=True,
|
|
).exists():
|
|
return view_func(instance, request, *args, **kwargs)
|
|
else:
|
|
if ProjectMember.objects.filter(
|
|
member=request.user,
|
|
workspace__slug=kwargs["slug"],
|
|
project_id=kwargs["project_id"],
|
|
role__in=allowed_role_values,
|
|
is_active=True,
|
|
).exists():
|
|
return view_func(instance, request, *args, **kwargs)
|
|
|
|
# Return permission denied if no conditions are met
|
|
return Response(
|
|
{"error": "You don't have the required permissions."},
|
|
status=status.HTTP_401_UNAUTHORIZED,
|
|
)
|
|
|
|
return _wrapped_view
|
|
|
|
return decorator
|