2023-11-09 17:04:55 +01:00
|
|
|
from channels.db import database_sync_to_async
|
|
|
|
from channels.middleware import BaseMiddleware as BaseChannelsMiddleware
|
|
|
|
from django.utils.functional import LazyObject, SimpleLazyObject, lazy
|
2017-12-08 16:01:34 +01:00
|
|
|
|
2018-12-08 23:15:37 +01:00
|
|
|
from c3nav.control.models import UserPermissions, UserSpaceAccess
|
2017-12-08 16:01:34 +01:00
|
|
|
|
|
|
|
|
2023-11-09 17:04:55 +01:00
|
|
|
class UserPermissionsLazyObject(LazyObject):
|
|
|
|
def _setup(self):
|
|
|
|
raise ValueError("Accessing scope user before it is ready.")
|
|
|
|
|
|
|
|
|
2017-12-08 16:01:34 +01:00
|
|
|
class UserPermissionsMiddleware:
|
2017-12-14 23:57:59 +01:00
|
|
|
"""
|
|
|
|
This middleware adds request.user_permissions to get the UserPermissions for the current request/user.
|
|
|
|
"""
|
2017-12-08 16:01:34 +01:00
|
|
|
def __init__(self, get_response):
|
|
|
|
self.get_response = get_response
|
|
|
|
|
2017-12-08 17:00:13 +01:00
|
|
|
def get_user_permissions(self, request):
|
|
|
|
try:
|
|
|
|
return getattr(request, '_user_permissions_cache')
|
|
|
|
except AttributeError:
|
|
|
|
pass
|
|
|
|
result = UserPermissions.get_for_user(request.user)
|
|
|
|
self._user_permissions_cache = result
|
|
|
|
return result
|
|
|
|
|
2018-12-08 23:15:37 +01:00
|
|
|
def get_user_space_accesses(self, request):
|
|
|
|
try:
|
|
|
|
return getattr(request, '_user_space_accesses_cache')
|
|
|
|
except AttributeError:
|
|
|
|
pass
|
|
|
|
result = UserSpaceAccess.get_for_user(request.user)
|
|
|
|
self._user_space_accesses_cache = result
|
|
|
|
return result
|
|
|
|
|
2017-12-08 16:01:34 +01:00
|
|
|
def __call__(self, request):
|
2017-12-08 17:00:13 +01:00
|
|
|
request.user_permissions = SimpleLazyObject(lambda: self.get_user_permissions(request))
|
2018-12-08 23:15:37 +01:00
|
|
|
request.user_space_accesses = lazy(self.get_user_space_accesses, dict)(request)
|
2017-12-08 16:01:34 +01:00
|
|
|
return self.get_response(request)
|
2023-11-09 17:04:55 +01:00
|
|
|
|
|
|
|
|
|
|
|
class UserPermissionsChannelMiddleware(BaseChannelsMiddleware):
|
|
|
|
async def __call__(self, scope, receive, send):
|
|
|
|
# todo: this doesn't seem to actually be lazy. and scope["user"] isn't either?
|
|
|
|
scope["user_permissions"] = UserPermissionsLazyObject()
|
|
|
|
scope["user_permissions"]._wrapped = await database_sync_to_async(UserPermissions.get_for_user)(scope["user"])
|
|
|
|
|
|
|
|
return await super().__call__(scope, receive, send)
|