f15e8aca3f
- Add LdapSyncQueue model for deferred LDAP operations - Add Celery tasks: process_ldap_queue_item, process_ldap_queue - Refactor all LDAP signals (employee, department, group, position) to enqueue operations on DirectoryLdapError/DirectoryServiceError - Add _queue.py helper for enqueuing with automatic Celery dispatch - Add Celery Beat periodic task (every 60s) for queue processing - Add management command: ldap_queue (status/retry/cleanup) - Add migration 0043_ldap_sync_queue - Add 18 tests covering model, tasks, signals, and enqueue logic - Include LDAP services refactoring (base_service, constants, user_login_service, user_mapper_service, user_password_service, phone_utils)
112 lines
4.0 KiB
Python
112 lines
4.0 KiB
Python
"""Сериализаторы для ролей и групп."""
|
|
|
|
from django.contrib.auth.models import Group, Permission
|
|
from employees.models import DepartmentPermission, DepartmentRole
|
|
from rest_framework import serializers
|
|
|
|
|
|
class DepartmentRoleSerializer(serializers.ModelSerializer):
|
|
scoped_permissions = serializers.PrimaryKeyRelatedField(
|
|
queryset=DepartmentPermission.objects.all(), many=True, required=False
|
|
)
|
|
scoped_permission_codes = serializers.ListField(
|
|
child=serializers.CharField(), required=False, write_only=True
|
|
)
|
|
|
|
permissions = serializers.SerializerMethodField(read_only=True)
|
|
permissions_verbose = serializers.SerializerMethodField(read_only=True)
|
|
|
|
class Meta:
|
|
model = DepartmentRole
|
|
fields = (
|
|
"id",
|
|
"department",
|
|
"name",
|
|
"scoped_permissions",
|
|
"scoped_permission_codes",
|
|
"permissions",
|
|
"permissions_verbose",
|
|
)
|
|
read_only_fields = ("id",)
|
|
|
|
def _apply_codes_if_present(self, instance: DepartmentRole, validated_data: dict):
|
|
codes = validated_data.pop("scoped_permission_codes", None)
|
|
if codes is not None:
|
|
qs = DepartmentPermission.objects.filter(code__in=codes)
|
|
if qs.count() != len(set(codes)):
|
|
raise serializers.ValidationError(
|
|
{"scoped_permission_codes": "Некоторые коды не существуют"}
|
|
)
|
|
instance.scoped_permissions.set(list(qs))
|
|
|
|
def create(self, validated_data):
|
|
codes = validated_data.pop("scoped_permission_codes", None)
|
|
perms = validated_data.pop("scoped_permissions", None)
|
|
|
|
role = super().create(validated_data)
|
|
|
|
if perms is not None:
|
|
role.scoped_permissions.set(perms)
|
|
|
|
if codes is not None:
|
|
qs = DepartmentPermission.objects.filter(code__in=codes)
|
|
if qs.count() != len(set(codes)):
|
|
raise serializers.ValidationError(
|
|
{"scoped_permission_codes": "Некоторые коды не существуют"}
|
|
)
|
|
role.scoped_permissions.set(list(qs))
|
|
|
|
return role
|
|
|
|
def update(self, instance, validated_data):
|
|
codes = validated_data.pop("scoped_permission_codes", None)
|
|
perms = validated_data.pop("scoped_permissions", None)
|
|
|
|
role = super().update(instance, validated_data)
|
|
|
|
if perms is not None:
|
|
role.scoped_permissions.set(perms)
|
|
|
|
if codes is not None:
|
|
qs = DepartmentPermission.objects.filter(code__in=codes)
|
|
if qs.count() != len(set(codes)):
|
|
raise serializers.ValidationError(
|
|
{"scoped_permission_codes": "Некоторые коды не существуют"}
|
|
)
|
|
role.scoped_permissions.set(list(qs))
|
|
|
|
return role
|
|
|
|
def get_permissions(self, obj: DepartmentRole):
|
|
return list(obj.scoped_permissions.values_list("id", flat=True))
|
|
|
|
def get_permissions_verbose(self, obj: DepartmentRole):
|
|
return [
|
|
{"id": p.id, "code": p.code, "name": p.name}
|
|
for p in obj.scoped_permissions.order_by("code").all()
|
|
]
|
|
|
|
|
|
class GroupSerializer(serializers.ModelSerializer):
|
|
permissions = serializers.PrimaryKeyRelatedField(
|
|
queryset=Permission.objects.all(), many=True, required=False
|
|
)
|
|
permissions_verbose = serializers.SerializerMethodField(read_only=True)
|
|
|
|
class Meta:
|
|
model = Group
|
|
fields = ["id", "name", "permissions", "permissions_verbose"]
|
|
|
|
def get_permissions_verbose(self, obj):
|
|
qs = obj.permissions.select_related("content_type").all()
|
|
return [
|
|
{
|
|
"id": p.id,
|
|
"codename": f"{p.content_type.app_label}.{p.codename}",
|
|
"name": p.name,
|
|
"app": p.content_type.app_label,
|
|
"model": p.content_type.model,
|
|
}
|
|
for p in qs
|
|
]
|