fix(generic): move permission check to individual rows

This allows us to use the table without a model set and with records of
different models

apis_core/apis_entities/tables.py

@@ -1,4 +1,3 @@
-from apis_core.generic.helpers import permission_fullname
 from apis_core.generic.tables import GenericTable, ActionColumn
 
 
@@ -8,16 +7,11 @@ class DuplicateColumn(ActionColumn):
     """
 
     template_name = "columns/duplicate.html"
+    permission = "create"
 
 
 class AbstractEntityTable(GenericTable):
     noduplicate = DuplicateColumn()
 
     class Meta(GenericTable.Meta):
         sequence = ("...", "view", "edit", "delete", "noduplicate")
-
-    def before_render(self, request):
-        super().before_render(request)
-        if model := getattr(self.Meta, "model"):
-            if not request.user.has_perm(permission_fullname("create", model)):
-                self.columns.hide("noduplicate")

apis_core/generic/tables.py

@@ -37,13 +37,20 @@ class ActionColumn(CustomTemplateColumn):
     verbose_name = ""
     attrs = {"td": {"style": "width:1%;"}}
 
+    def render(self, record, table, *args, **kwargs):
+        if permission := getattr(self, "permission", False):
+            if not table.context.request.user.has_perm(permission_fullname(permission, record)):
+                return ""
+        return super().render(record, table, *args, **kwargs)
+
 
 class DeleteColumn(ActionColumn):
     """
     A column showing a delete button
     """
 
     template_name = "columns/delete.html"
+    permission = "delete"
 
 
 class EditColumn(ActionColumn):
@@ -52,6 +59,7 @@ class EditColumn(ActionColumn):
     """
 
     template_name = "columns/edit.html"
+    permission = "change"
 
 
 class ViewColumn(ActionColumn):
@@ -60,6 +68,7 @@ class ViewColumn(ActionColumn):
     """
 
     template_name = "columns/view.html"
+    permission = "view"
 
 
 class DescriptionColumn(CustomTemplateColumn):
@@ -85,12 +94,3 @@ class GenericTable(tables.Table):
     class Meta:
         fields = ["id", "desc"]
         sequence = ("...", "view", "edit", "delete")
-
-    def before_render(self, request):
-        if model := getattr(self.Meta, "model"):
-            if not request.user.has_perm(permission_fullname("delete", model)):
-                self.columns.hide("delete")
-            if not request.user.has_perm(permission_fullname("change", model)):
-                self.columns.hide("edit")
-            if not request.user.has_perm(permission_fullname("view", model)):
-                self.columns.hide("view")