1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
from __future__ import absolute_import
from django.http import HttpResponse
from django.views.generic.edit import CreateView, DeleteView, UpdateView
from rules.contrib.views import (
LoginRequiredMixin,
PermissionRequiredMixin,
objectgetter,
permission_required,
)
from .models import Book
class BookMixin(object):
def get_object(self):
return Book.objects.get(pk=self.kwargs["book_id"])
class BookMixinWithError(object):
def get_object(self):
raise AttributeError("get_object")
@permission_required("testapp.change_book", fn=objectgetter(Book, "book_id"))
def change_book(request, book_id):
return HttpResponse("OK")
class BookCreateView(
LoginRequiredMixin, PermissionRequiredMixin, BookMixin, CreateView
):
fields = ["title"]
template_name = "empty.html"
permission_required = "testapp.create_book"
class BookUpdateView(
LoginRequiredMixin, PermissionRequiredMixin, BookMixin, UpdateView
):
fields = ["title"]
template_name = "empty.html"
permission_required = "testapp.change_book"
class BookUpdateErrorView(
LoginRequiredMixin, PermissionRequiredMixin, BookMixinWithError, UpdateView
):
fields = ["title"]
template_name = "empty.html"
permission_required = "testapp.change_book"
@permission_required("testapp.delete_book", fn=objectgetter(Book, "book_id"))
def delete_book(request, book_id):
return HttpResponse("OK")
class BookDeleteView(
LoginRequiredMixin, PermissionRequiredMixin, BookMixin, DeleteView
):
template_name = "empty.html"
permission_required = "testapp.delete_book"
@permission_required(
"testapp.delete_book", fn=objectgetter(Book, "book_id"), raise_exception=True
)
def view_that_raises(request, book_id):
return HttpResponse("OK")
class ViewThatRaises(
LoginRequiredMixin, PermissionRequiredMixin, BookMixin, DeleteView
):
template_name = "empty.html"
raise_exception = True
permission_required = "testapp.delete_book"
@permission_required(
["testapp.change_book", "testapp.delete_book"], fn=objectgetter(Book, "book_id")
)
def view_with_permission_list(request, book_id):
return HttpResponse("OK")
class ViewWithPermissionList(
LoginRequiredMixin, PermissionRequiredMixin, BookMixin, DeleteView
):
template_name = "empty.html"
permission_required = ["testapp.change_book", "testapp.delete_book"]
@permission_required("testapp.delete_book", fn=objectgetter(Book, "book_id"))
def view_with_object(request, book_id):
return HttpResponse("OK")
|
