gestioCOF/kfet/auth/models.py

from django.contrib.auth.models import Group, Permission
from django.db import models
from django.utils.crypto import get_random_string
from django.utils.translation import ugettext_lazy as _

KFET_APP_LABELS = ["kfet", "kfetauth"]


class GenericTeamTokenManager(models.Manager):
    def create_token(self):
        token = get_random_string(50)
        while self.filter(token=token).exists():
            token = get_random_string(50)
        return self.create(token=token)


class GenericTeamToken(models.Model):
    token = models.CharField(max_length=50, unique=True)

    objects = GenericTeamTokenManager()


class KFetPermissionManager(models.Manager):
    def get_queryset(self):
        return (
            super().get_queryset().filter(content_type__app_label__in=KFET_APP_LABELS)
        )


class KFetPermission(Permission):
    objects = KFetPermissionManager()

    class Meta:
        proxy = True
        verbose_name = _("Permission K-Fêt")
        verbose_name_plural = _("Permissions K-Fêt")


class KFetGroup(Group):
    # Même si on n'ajoute que des méthodes, on fait un héritage complet pour
    # mieux distinguer les groupes K-Fêt via l'ORM (i.e. faire `KFetGroup.objects.all`)

    def give_admin_access(self):
        perms = KFetPermission.objects.all()
        self.permissions.add(*perms)

    def give_staff_access(self):
        perms = KFetPermission.objects.filter(
            codename__in=["is_team", "perform_deposit", "add_account", "add_transfer"]
        )
        self.permissions.add(*perms)

    class Meta:
        verbose_name = _("Groupe K-Fêt")
        verbose_name_plural = _("Groupes K-Fêt")