OpenSlides/openslides/assignments/access_permissions.py

from typing import Any, Dict, List

from ..utils.access_permissions import BaseAccessPermissions
from ..utils.auth import async_has_perm, has_perm


class AssignmentAccessPermissions(BaseAccessPermissions):
    """
    Access permissions container for Assignment and AssignmentViewSet.
    """
    base_permission = 'assignments.can_see'

    def get_serializer_class(self, user=None):
        """
        Returns different serializer classes according to users permissions.
        """
        from .serializers import AssignmentFullSerializer, AssignmentShortSerializer

        if user is None or (has_perm(user, 'assignments.can_see') and has_perm(user, 'assignments.can_manage')):
            serializer_class = AssignmentFullSerializer
        else:
            serializer_class = AssignmentShortSerializer
        return serializer_class

    async def get_restricted_data(
            self,
            full_data: List[Dict[str, Any]],
            user_id: int) -> List[Dict[str, Any]]:
        """
        Returns the restricted serialized data for the instance prepared
        for the user. Removes unpublished polls for non admins so that they
        only get a result like the AssignmentShortSerializer would give them.
        """
        # Parse data.
        if await async_has_perm(user_id, 'assignments.can_see') and await async_has_perm(user_id, 'assignments.can_manage'):
            data = full_data
        elif await async_has_perm(user_id, 'assignments.can_see'):
            # Exclude unpublished poll votes.
            data = []
            for full in full_data:
                full_copy = full.copy()
                polls = full_copy['polls']
                for poll in polls:
                    if not poll['published']:
                        for option in poll['options']:
                            option['votes'] = []  # clear votes for not published polls
                        poll['has_votes'] = False  # A user should see, if there are votes.
                data.append(full_copy)
        else:
            data = []

        return data