mirror of
https://gitlab.crans.org/bde/nk20
synced 2025-10-30 23:39:54 +01:00
92 lines
3.0 KiB
Python
92 lines
3.0 KiB
Python
# Copyright (C) 2018-2025 by BDE ENS Paris-Saclay
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
|
|
from django.contrib.contenttypes.models import ContentType
|
|
from django.contrib.auth.models import User
|
|
from django.utils import timezone
|
|
from rest_framework import serializers
|
|
from member.api.serializers import ProfileSerializer, MembershipSerializer
|
|
from member.models import Membership
|
|
from note.api.serializers import NoteSerializer
|
|
from note.models import Alias
|
|
from note_kfet.middlewares import get_current_request
|
|
from permission.backends import PermissionBackend
|
|
|
|
|
|
class UserSerializer(serializers.ModelSerializer):
|
|
"""
|
|
REST API Serializer for Users.
|
|
The djangorestframework plugin will analyse the model `User` and parse all fields in the API.
|
|
"""
|
|
|
|
class Meta:
|
|
model = User
|
|
exclude = (
|
|
'password',
|
|
'groups',
|
|
'user_permissions',
|
|
)
|
|
|
|
|
|
class ContentTypeSerializer(serializers.ModelSerializer):
|
|
"""
|
|
REST API Serializer for Users.
|
|
The djangorestframework plugin will analyse the model `User` and parse all fields in the API.
|
|
"""
|
|
|
|
class Meta:
|
|
model = ContentType
|
|
fields = '__all__'
|
|
|
|
|
|
class OAuthSerializer(serializers.ModelSerializer):
|
|
"""
|
|
Informations that are transmitted by OAuth.
|
|
For now, this includes user, profile and valid memberships.
|
|
This should be better managed later.
|
|
"""
|
|
normalized_name = serializers.SerializerMethodField()
|
|
|
|
profile = serializers.SerializerMethodField()
|
|
|
|
note = serializers.SerializerMethodField()
|
|
|
|
memberships = serializers.SerializerMethodField()
|
|
|
|
def get_normalized_name(self, obj):
|
|
return Alias.normalize(obj.username)
|
|
|
|
def get_profile(self, obj):
|
|
# Display the profile of the user only if we have rights to see it.
|
|
return ProfileSerializer().to_representation(obj.profile) \
|
|
if PermissionBackend.check_perm(get_current_request(), 'member.view_profile', obj.profile) else None
|
|
|
|
def get_note(self, obj):
|
|
# Display the note of the user only if we have rights to see it.
|
|
return NoteSerializer().to_representation(obj.note) \
|
|
if PermissionBackend.check_perm(get_current_request(), 'note.view_note', obj.note) else None
|
|
|
|
def get_memberships(self, obj):
|
|
# Display only memberships that we are allowed to see.
|
|
return serializers.ListSerializer(child=MembershipSerializer()).to_representation(
|
|
obj.memberships.filter(date_start__lte=timezone.now(), date_end__gte=timezone.now())
|
|
.filter(PermissionBackend.filter_queryset(get_current_request(), Membership, 'view')))
|
|
|
|
class Meta:
|
|
model = User
|
|
fields = (
|
|
'id',
|
|
'username',
|
|
'normalized_name',
|
|
'first_name',
|
|
'last_name',
|
|
'email',
|
|
'is_superuser',
|
|
'is_active',
|
|
'is_staff',
|
|
'profile',
|
|
'note',
|
|
'memberships',
|
|
)
|