<reponame>code-review-doctor/orchestra
from rest_framework import permissions

from orchestra.models import Worker
from orchestra.models import Todo
from orchestra.models import TodoQA


class IsAssociatedWithTodosProject(permissions.BasePermission):
    """
    Ensures that a user's worker is accoiated with the todo's project.
    """

    def has_object_permission(self, request, view, obj):
        worker = Worker.objects.get(user=request.user)
        if isinstance(obj, Todo):
            project = obj.project
        elif isinstance(obj, TodoQA):
            project = obj.todo.project
        else:
            project = None
        return (
            project and
            (worker.is_project_admin() or
             worker.assignments.filter(task__project=project).exists()))


class IsAssociatedWithProject(permissions.BasePermission):
    """
    Ensures that a user's worker is associated with the request's
    `project`.

    """

    def has_permission(self, request, view):
        """
        We pass project_id as a payload in cases when the request
        is either POST, PUT or PATCH. It can be passed via query param
        not only in a GET request, but also in the requests listed above
        (when applying a filter).
        """
        worker = Worker.objects.get(user=request.user)
        if worker.is_project_admin():
            return True
        todo_id = request.data.get('todo')
        if todo_id is None:
            todo_id = view.kwargs.get('pk')
        project_id = request.data.get(
            'project') or request.data.get('project__id')
        if project_id is None:
            project_id = request.query_params.get(
                'project') or request.query_params.get('project__id')
        if project_id is None and todo_id is not None:
            project_id = Todo.objects.get(id=todo_id).project.id
        return worker.assignments.filter(task__project__id=project_id).exists()


class IsAssociatedWithTask(permissions.BasePermission):
    """
    Ensures that a user's worker is associated with the request's
    `task`.

    """

    def has_permission(self, request, view):
        worker = Worker.objects.get(user=request.user)
        if worker.is_project_admin():
            return True
        if request.method == 'GET':
            task_id = request.query_params.get('task')
            return worker.assignments.filter(task=task_id).exists()
        return False

from rest_framework import permissions

from orchestra.models import Worker
from orchestra.models import Todo
from orchestra.models import TodoQA


class IsAssociatedWithTodosProject(permissions.BasePermission):
    """
    Ensures that a user's worker is accoiated with the todo's project.
    """

    def has_object_permission(self, request, view, obj):
        worker = Worker.objects.get(user=request.user)
        if isinstance(obj, Todo):
            project = obj.project
        elif isinstance(obj, TodoQA):
            project = obj.todo.project
        else:
            project = None
        return (
            project and
            (worker.is_project_admin() or
             worker.assignments.filter(task__project=project).exists()))


class IsAssociatedWithProject(permissions.BasePermission):
    """
    Ensures that a user's worker is associated with the request's
    `project`.

    """

    def has_permission(self, request, view):
        """
        We pass project_id as a payload in cases when the request
        is either POST, PUT or PATCH. It can be passed via query param
        not only in a GET request, but also in the requests listed above
        (when applying a filter).
        """
        worker = Worker.objects.get(user=request.user)
        if worker.is_project_admin():
            return True
        todo_id = request.data.get('todo')
        if todo_id is None:
            todo_id = view.kwargs.get('pk')
        project_id = request.data.get(
            'project') or request.data.get('project__id')
        if project_id is None:
            project_id = request.query_params.get(
                'project') or request.query_params.get('project__id')
        if project_id is None and todo_id is not None:
            project_id = Todo.objects.get(id=todo_id).project.id
        return worker.assignments.filter(task__project__id=project_id).exists()


class IsAssociatedWithTask(permissions.BasePermission):
    """
    Ensures that a user's worker is associated with the request's
    `task`.

    """

    def has_permission(self, request, view):
        worker = Worker.objects.get(user=request.user)
        if worker.is_project_admin():
            return True
        if request.method == 'GET':
            task_id = request.query_params.get('task')
            return worker.assignments.filter(task=task_id).exists()
        return False
Ensures that a user's worker is accoiated with the todo's project. Ensures that a user's worker is associated with the request's     `project`. We pass project_id as a payload in cases when the request         is either POST, PUT or PATCH. It can be passed via query param         not only in a GET request, but also in the requests listed above         (when applying a filter). Ensures that a user's worker is associated with the request's     `task`.