generated from brylie/django-bootstrap-quick-start
-
Notifications
You must be signed in to change notification settings - Fork 18
/
Copy pathviews.py
281 lines (201 loc) · 9.02 KB
/
views.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
from circles.models import Circle
from django.contrib.auth.mixins import LoginRequiredMixin, UserPassesTestMixin
from django.http import HttpResponseRedirect
from django.shortcuts import redirect, render
from django.urls import reverse
from django.views.generic import View
from .forms import ActivityModelForm
from .models import Activity, Comment, User
class ActivityCreateView(UserPassesTestMixin, LoginRequiredMixin, View):
raise_exception = True
def test_func(self, *args, **kwargs):
"""
Only circle's care organizers and companions can add a care group activity.
"""
circle_id = self.request.POST.get("circle", None)
if circle_id:
circle = Circle.objects.get(id=circle_id)
user_is_organizer = self.request.user in circle.organizers
user_is_companion = self.request.user in circle.companions
user_can_update_activity = user_is_organizer or user_is_companion
return user_can_update_activity
else:
return False
def post(self, *args, **kwargs):
form = ActivityModelForm(self.request.POST)
if form.is_valid():
activity = form.save()
redirect_to = reverse(
"circle-detail",
kwargs={
"pk": activity.circle.id,
},
)
return HttpResponseRedirect(redirect_to)
class ActivityUpdateView(UserPassesTestMixin, LoginRequiredMixin, View):
raise_exception = True
def test_func(self, *args, **kwargs):
"""Only circle's care organizers and companions can update activity"""
circle_id = self.request.POST.get("circle", None)
if circle_id:
circle = Circle.objects.get(id=circle_id)
user_is_organizer = self.request.user in circle.organizers
user_is_companion = self.request.user in circle.companions
user_can_update_activity = user_is_organizer or user_is_companion
return user_can_update_activity
else:
False
def post(self, *args, **kwargs):
activity = Activity.objects.get(pk=kwargs["pk"])
form = ActivityModelForm(
self.request.POST,
instance=activity,
)
if form.is_valid():
activity = form.save()
redirect_to = reverse(
"circle-detail",
kwargs={
"pk": activity.circle.id,
},
)
return HttpResponseRedirect(redirect_to)
class ActivityDeleteView(UserPassesTestMixin, LoginRequiredMixin, View):
raise_exception = True
def test_func(self, *args, **kwargs):
"""Only the circle's care organizers can delete activity"""
self.activity = Activity.objects.get(id=self.kwargs["activity_id"])
user_is_organizer = self.request.user in self.activity.circle.organizers
user_can_delete_activity = user_is_organizer
return user_can_delete_activity
def post(self, request, *args, **kwargs):
circle_id = self.activity.circle.id
self.activity.delete()
return redirect(
reverse(
"circle-detail",
kwargs={"pk": circle_id},
)
)
class ActivityAddParticipantView(UserPassesTestMixin, LoginRequiredMixin, View):
raise_exception = True
def test_func(self, *args, **kwargs):
"""
Only the circle's care organizers can add other companions to activity.
Only the circle's companions can add themselves to an activity.
"""
activity_id = self.kwargs.get("activity_id", None)
if activity_id:
activity = Activity.objects.get(id=activity_id)
user_is_organizer = self.request.user in activity.circle.organizers
user_is_companion = self.request.user in activity.circle.companions
user_id = self.request.POST.get("user_id", None)
user_is_adding_self = user_id == str(self.request.user.id)
user_can_add_participant = user_is_organizer or (
user_is_companion and user_is_adding_self
)
return user_can_add_participant
def post(self, request, activity_id, *args, **kwargs):
user_id = request.POST["user_id"]
activity = Activity.objects.get(id=activity_id)
activity.participants.add(user_id)
return redirect(
reverse(
"circle-detail",
kwargs={"pk": activity.circle.id},
)
)
class ActivityRemoveParticipantView(UserPassesTestMixin, LoginRequiredMixin, View):
raise_exception = True
def test_func(self, *args, **kwargs):
"""
Only the circle's care organizers can remove other companions from activity.
Only the circle's companions can remove themselves from an activity.
Non-companions or anonymous users should not be able to remove themselves,
although they wouldn't be added in the first place.
"""
activity_id = self.kwargs.get("activity_id", None)
if activity_id:
activity = Activity.objects.get(id=activity_id)
user_is_not_companion = self.request.user not in activity.circle.companions
if user_is_not_companion:
return False
user_is_organizer = self.request.user in activity.circle.organizers
user_id = self.request.POST.get("user_id", None)
user_is_removing_self = user_id == str(self.request.user.id)
user_can_remove_participant = user_is_organizer or user_is_removing_self
return user_can_remove_participant
def post(self, request, activity_id, *args, **kwargs):
user_id = request.POST["user_id"]
activity = Activity.objects.get(id=activity_id)
activity.participants.remove(user_id)
return redirect(
reverse(
"circle-detail",
kwargs={"pk": activity.circle.id},
)
)
class ActivitySetDoneView(UserPassesTestMixin, LoginRequiredMixin, View):
raise_exception = True
def test_func(self, *args, **kwargs):
"""Only activity participants or circle's care organizers can update activity"""
self.activity = Activity.objects.get(id=self.kwargs["activity_id"])
user_is_participant = self.request.user in self.activity.participants.all()
user_is_organizer = self.request.user in self.activity.circle.organizers
user_can_update_activity = user_is_participant or user_is_organizer
return user_can_update_activity
def get(self, request, activity_id, *args, **kwargs):
"""If user passes permission tests, set activity as done."""
self.activity.done = True
self.activity.save()
return redirect(
reverse(
"circle-detail",
kwargs={"pk": self.activity.circle.id},
)
)
class ActivityAddCommentView(UserPassesTestMixin, LoginRequiredMixin, View):
raise_exception = True
def test_func(self, *args, **kwargs):
"""Only activity participants or circle's care organizers can comment activity"""
self.activity = Activity.objects.get(id=self.kwargs["activity_id"])
user_is_participant = self.request.user in self.activity.participants.all()
user_is_organizer = self.request.user in self.activity.circle.organizers
user_can_update_activity = user_is_participant or user_is_organizer
return user_can_update_activity
def post(self, request, activity_id, *args, **kwargs):
"""Adds user comments to the comment database."""
user_id = request.POST["user_id"]
text = request.POST["user_comment"]
activity = Activity.objects.get(id = activity_id)
new_comment = Comment(user_id=user_id, text=text, activity=activity)
new_comment.save()
return redirect(
reverse(
"circle-detail",
kwargs={"pk": activity.circle.id},
)
)
class ActivityViewCommentView(UserPassesTestMixin, LoginRequiredMixin, View):
raise_exception = True
def test_func(self, *args, **kwargs):
"""Allow everyone to view comments for activities"""
return True
def get(self, request, activity_id, *args, **kwargs):
"""Fetch all comments for activity with activity_id"""
activity = Activity.objects.get(id=activity_id)
activity_comments_list = Comment.objects.filter(activity = activity)
newList = [
{
"name": str(User.objects.get(id = t.user_id).display_name),
"text" : str(t.text),
"timestamp" : str(t.timestamp).split(".")[0]
} for t in activity_comments_list
]
context = {
"activity_name": str(activity),
"activity_date": activity.activity_date,
"activity_comments_list": newList,
}
template_name="activities/comments_detail.html"
return render(request, template_name, context)