86 lines
3.3 KiB
Python
86 lines
3.3 KiB
Python
# Python imports
|
|
import json
|
|
|
|
# Django imports
|
|
from django.utils import timezone
|
|
from django.core.serializers.json import DjangoJSONEncoder
|
|
|
|
# Third Party imports
|
|
from rest_framework.response import Response
|
|
from rest_framework import status
|
|
from rest_framework.parsers import MultiPartParser, FormParser
|
|
|
|
# Module imports
|
|
from .. import BaseAPIView
|
|
from plane.app.serializers import IssueAttachmentSerializer
|
|
from plane.app.permissions import ProjectEntityPermission
|
|
from plane.db.models import IssueAttachment, ProjectMember
|
|
from plane.bgtasks.issue_activites_task import issue_activity
|
|
|
|
|
|
class IssueAttachmentEndpoint(BaseAPIView):
|
|
serializer_class = IssueAttachmentSerializer
|
|
permission_classes = [
|
|
ProjectEntityPermission,
|
|
]
|
|
model = IssueAttachment
|
|
parser_classes = (MultiPartParser, FormParser)
|
|
|
|
def post(self, request, slug, project_id, issue_id):
|
|
serializer = IssueAttachmentSerializer(data=request.data)
|
|
if serializer.is_valid():
|
|
serializer.save(project_id=project_id, issue_id=issue_id)
|
|
issue_activity.delay(
|
|
type="attachment.activity.created",
|
|
requested_data=None,
|
|
actor_id=str(self.request.user.id),
|
|
issue_id=str(self.kwargs.get("issue_id", None)),
|
|
project_id=str(self.kwargs.get("project_id", None)),
|
|
current_instance=json.dumps(
|
|
serializer.data,
|
|
cls=DjangoJSONEncoder,
|
|
),
|
|
epoch=int(timezone.now().timestamp()),
|
|
notification=True,
|
|
origin=request.META.get("HTTP_ORIGIN"),
|
|
)
|
|
return Response(serializer.data, status=status.HTTP_201_CREATED)
|
|
return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
|
|
|
|
def delete(self, request, slug, project_id, issue_id, pk):
|
|
issue_attachment = IssueAttachment.objects.get(pk=pk)
|
|
if issue_attachment.created_by_id != request.user.id and (
|
|
not ProjectMember.objects.filter(
|
|
workspace__slug=slug,
|
|
member=request.user,
|
|
role=20,
|
|
project_id=project_id,
|
|
is_active=True,
|
|
).exists()
|
|
):
|
|
return Response(
|
|
{"error": "Only admin or creator can delete the attachment"},
|
|
status=status.HTTP_403_FORBIDDEN,
|
|
)
|
|
issue_attachment.asset.delete(save=False)
|
|
issue_attachment.delete()
|
|
issue_activity.delay(
|
|
type="attachment.activity.deleted",
|
|
requested_data=None,
|
|
actor_id=str(self.request.user.id),
|
|
issue_id=str(self.kwargs.get("issue_id", None)),
|
|
project_id=str(self.kwargs.get("project_id", None)),
|
|
current_instance=None,
|
|
epoch=int(timezone.now().timestamp()),
|
|
notification=True,
|
|
origin=request.META.get("HTTP_ORIGIN"),
|
|
)
|
|
|
|
return Response(status=status.HTTP_204_NO_CONTENT)
|
|
|
|
def get(self, request, slug, project_id, issue_id):
|
|
issue_attachments = IssueAttachment.objects.filter(
|
|
issue_id=issue_id, workspace__slug=slug, project_id=project_id
|
|
)
|
|
serializer = IssueAttachmentSerializer(issue_attachments, many=True)
|
|
return Response(serializer.data, status=status.HTTP_200_OK)
|