OpenSlides/openslides/users/signals.py

142 lines
5.7 KiB
Python
Raw Normal View History

2015-09-16 00:55:27 +02:00
from django.contrib.auth.models import Permission
2015-02-18 15:58:12 +01:00
from django.db.models import Q
2013-03-12 20:58:22 +01:00
2015-09-16 00:55:27 +02:00
from .models import Group, User
2013-03-12 20:58:22 +01:00
def create_builtin_groups_and_admin(**kwargs):
"""
Creates the builtin groups: Default, Delegates, Staff and Committees.
Creates the builtin user: admin.
"""
# Check whether the group pk's 1 to 4 are free.
if Group.objects.filter(pk__in=range(1, 5)).exists():
# Do completely nothing if there are already some of our groups in the database.
return
2015-02-18 15:58:12 +01:00
permission_strings = (
'agenda.can_be_speaker',
'agenda.can_manage',
'agenda.can_see',
'agenda.can_see_hidden_items',
'assignments.can_manage',
'assignments.can_nominate_other',
'assignments.can_nominate_self',
'assignments.can_see',
2015-06-29 12:08:15 +02:00
'core.can_manage_config',
2015-02-18 15:58:12 +01:00
'core.can_manage_projector',
'core.can_manage_tags',
'core.can_see_frontpage',
2015-02-18 15:58:12 +01:00
'core.can_see_projector',
'core.can_use_chat',
'mediafiles.can_manage',
'mediafiles.can_see',
'mediafiles.can_upload',
'motions.can_create',
'motions.can_manage',
'motions.can_see',
'motions.can_see_and_manage_comments',
'motions.can_support',
2015-02-18 15:58:12 +01:00
'users.can_manage',
'users.can_see_extra_data',
'users.can_see_name', )
permission_query = Q()
2015-09-16 00:55:27 +02:00
permission_dict = {}
2015-02-18 15:58:12 +01:00
2015-09-16 00:55:27 +02:00
# Load all permissions
2015-02-18 15:58:12 +01:00
for permission_string in permission_strings:
app_label, codename = permission_string.split('.')
query_part = Q(content_type__app_label=app_label) & Q(codename=codename)
permission_query = permission_query | query_part
for permission in Permission.objects.select_related('content_type').filter(permission_query):
permission_string = '.'.join((permission.content_type.app_label, permission.codename))
permission_dict[permission_string] = permission
# Default (pk 1)
2015-02-18 15:58:12 +01:00
base_permissions = (
permission_dict['agenda.can_see'],
permission_dict['agenda.can_see_hidden_items'],
permission_dict['assignments.can_see'],
permission_dict['core.can_see_frontpage'],
2015-02-18 15:58:12 +01:00
permission_dict['core.can_see_projector'],
permission_dict['mediafiles.can_see'],
permission_dict['motions.can_see'],
2015-02-18 15:58:12 +01:00
permission_dict['users.can_see_name'], )
group_default = Group.objects.create(name='Default', pk=1)
group_default.permissions.add(*base_permissions)
# Delegates (pk 2)
2015-02-18 15:58:12 +01:00
delegates_permissions = (
permission_dict['agenda.can_see'],
permission_dict['agenda.can_see_hidden_items'],
permission_dict['agenda.can_be_speaker'],
permission_dict['assignments.can_see'],
permission_dict['assignments.can_nominate_other'],
permission_dict['assignments.can_nominate_self'],
permission_dict['core.can_see_frontpage'],
permission_dict['core.can_see_projector'],
permission_dict['mediafiles.can_see'],
permission_dict['mediafiles.can_upload'],
permission_dict['motions.can_see'],
permission_dict['motions.can_create'],
permission_dict['motions.can_support'],
permission_dict['users.can_see_name'], )
group_delegates = Group.objects.create(name='Delegates', pk=2)
2015-02-18 15:58:12 +01:00
group_delegates.permissions.add(*delegates_permissions)
# Staff (pk 3)
2015-02-18 15:58:12 +01:00
staff_permissions = (
permission_dict['agenda.can_see'],
permission_dict['agenda.can_see_hidden_items'],
permission_dict['agenda.can_be_speaker'],
permission_dict['agenda.can_manage'],
permission_dict['assignments.can_see'],
permission_dict['assignments.can_manage'],
permission_dict['assignments.can_nominate_other'],
permission_dict['assignments.can_nominate_self'],
permission_dict['core.can_see_frontpage'],
permission_dict['core.can_see_projector'],
2015-06-29 12:08:15 +02:00
permission_dict['core.can_manage_config'],
2015-02-18 15:58:12 +01:00
permission_dict['core.can_manage_projector'],
permission_dict['core.can_manage_tags'],
permission_dict['core.can_use_chat'],
permission_dict['mediafiles.can_see'],
permission_dict['mediafiles.can_manage'],
permission_dict['mediafiles.can_upload'],
permission_dict['motions.can_see'],
permission_dict['motions.can_create'],
permission_dict['motions.can_manage'],
permission_dict['motions.can_see_and_manage_comments'],
permission_dict['users.can_see_name'],
permission_dict['users.can_manage'],
permission_dict['users.can_see_extra_data'],)
group_staff = Group.objects.create(name='Staff', pk=3)
2015-02-18 15:58:12 +01:00
group_staff.permissions.add(*staff_permissions)
# Add users.can_see_name permission to staff
2015-09-16 00:55:27 +02:00
# group to ensure proper management possibilities
# TODO: Remove this redundancy after cleanup of the permission system.
2015-02-18 15:58:12 +01:00
group_staff.permissions.add(
permission_dict['users.can_see_name'])
# Committees (pk 4)
committees_permissions = (
permission_dict['agenda.can_see'],
permission_dict['agenda.can_see_hidden_items'],
permission_dict['agenda.can_be_speaker'],
permission_dict['assignments.can_see'],
permission_dict['core.can_see_frontpage'],
permission_dict['core.can_see_projector'],
permission_dict['mediafiles.can_see'],
permission_dict['mediafiles.can_upload'],
permission_dict['motions.can_see'],
permission_dict['motions.can_create'],
permission_dict['motions.can_support'],
permission_dict['users.can_see_name'], )
group_committee = Group.objects.create(name='Committees', pk=4)
group_committee.permissions.add(*committees_permissions)
2015-09-16 00:55:27 +02:00
# Create or reset admin user
User.objects.create_or_reset_admin_user()