9bb77817dd
* Remove access_permission.get_full_data() * Remove access_permission.gcet_serializer_class() * get serializer class from model
31 lines
1.0 KiB
Python
31 lines
1.0 KiB
Python
from typing import Any, Dict, List
|
|
|
|
from ..utils.access_permissions import BaseAccessPermissions
|
|
from ..utils.auth import async_has_perm
|
|
|
|
|
|
class MediafileAccessPermissions(BaseAccessPermissions):
|
|
"""
|
|
Access permissions container for Mediafile and MediafileViewSet.
|
|
"""
|
|
base_permission = 'mediafiles.can_see'
|
|
|
|
async def get_restricted_data(
|
|
self,
|
|
full_data: List[Dict[str, Any]],
|
|
user_id: int) -> List[Dict[str, Any]]:
|
|
"""
|
|
Returns the restricted serialized data for the instance prepared
|
|
for the user. Removes hidden mediafiles for some users.
|
|
"""
|
|
# Parse data.
|
|
if await async_has_perm(user_id, 'mediafiles.can_see') and await async_has_perm(user_id, 'mediafiles.can_see_hidden'):
|
|
data = full_data
|
|
elif await async_has_perm(user_id, 'mediafiles.can_see'):
|
|
# Exclude hidden mediafiles.
|
|
data = [full for full in full_data if not full['hidden']]
|
|
else:
|
|
data = []
|
|
|
|
return data
|