src/ldt/ldt/security/command.py
author cavaliet
Wed, 07 Nov 2012 17:52:14 +0100
changeset 911 9f29dfc4c203
parent 549 0313c23ffe7e
child 1190 129d45eec68c
permissions -rw-r--r--
first step of the json cinelab to xml ldt serializer. Eveything works but edits.

from django.conf import settings
from django.contrib.auth.models import Group, User
from ldt.ldt_utils.models import Project, Content
from guardian.shortcuts import assign, remove_perm
from ldt.management.utils import show_progress

def set_default_permissions(verbose=False, is_migration=False, orm=None):
    writer = None
    
    
    if is_migration:
        list_model = {'User': orm['auth.user'],
                      'Group': orm['auth.group'],
                      'Project': orm.Project,
                      'Content': orm.Content
                      }
    else:
        list_model = {'Project': Project,
                  'Content': Content,
                  'User': User,
                  'Group': Group
                  }
    
    everyone, created = Group.objects.get_or_create(name=settings.PUBLIC_GROUP_NAME)     
     
    if verbose:   
        total = list_model['Project'].objects.count()
        
    for i, proj in enumerate(list_model['Project'].objects.all()):
        
        if proj.state == 2:
            assign('ldt_utils.view_project', everyone, proj)
        else:
            remove_perm('ldt_utils.view_project', everyone, proj)
        
        assign('ldt_utils.view_project', proj.owner, proj)
        assign('ldt_utils.change_project', proj.owner, proj)            
            
        if verbose:
            writer = show_progress(i, total, "Assign permissions to projects", 40, writer)
        
    for published_proj in list_model['Project'].objects.filter(state=2):
        assign('ldt_utils.view_project', everyone, published_proj)
    
    if verbose:    
        writer = None
        total = list_model['User'].objects.count()
        
    for i, user in enumerate(list_model['User'].objects.all()):
        everyone.user_set.add(user) 
        if verbose:
            writer = show_progress(i, total, "Assign permissions to groups", 40, writer)         
          
        for group in user.groups.exclude(name=settings.PUBLIC_GROUP_NAME):
            for proj in list_model['Project'].objects.filter(owner=user):
                assign('ldt_utils.view_project', group, proj)
            
        for content in list_model['Content'].objects.all():
            if user.has_perm('view_content', content):
                assign('ldt_utils.view_media', user, content.media_obj)
    
                
    for admin in list_model['User'].objects.filter(is_superuser=True):
        for g in list_model['Group'].objects.all():
            g.user_set.add(admin)