Игорь Надеин
8b8974e3ef
- Add DeptPerm.MANAGE_EQUIPMENT scoped permission constant
- Create migration 0035 for new DepartmentPermission
- Refactor CanManageEquipment permission class with:
* Admin/staff/superuser → full access
* Model permissions → full access (add/change/delete_equipment)
* Department head → own department, can choose responsible
* Scoped permission → own department, responsible forced to head
* Regular members → no access
- Update EquipmentListSerializer with:
* Permission level detection (full/dept_head/scoped/None)
* Auto-fill department and responsible based on permission level
* Validation that responsible is in same department
- Add create_options endpoint returning:
* allowed_departments, can_choose_department, can_choose_responsible
* default_responsible, permission_level
- Add bulk equipment creation support with auto-generated inventory numbers
- Implement 45 comprehensive permission tests (all passing)
- Fix is_active=True in test make_user() fixture
Tests: 45/45 passing ✅
56 lines
2.3 KiB
Python
56 lines
2.3 KiB
Python
# backend\employees\constants.py
|
||
GENDER_CHOICES = (
|
||
(1, "Мужской"),
|
||
(2, "Женский"),
|
||
(0, "Не указан"),
|
||
)
|
||
|
||
|
||
ACTION_HIRED = "hired"
|
||
ACTION_DISMISSED = "dismissed"
|
||
ACTION_ON_LEAVE = "on_leave"
|
||
ACTION_RETURNED_FROM_LEAVE = "returned_from_leave"
|
||
ACTION_ON_MATERNITY = "on_maternity"
|
||
ACTION_RETURNED_FROM_MATERNITY = "returned_from_maternity"
|
||
ACTION_TRANSFERRED = "transferred"
|
||
ACTION_REHIRED = "rehired"
|
||
|
||
ACTION_CHOICES = [
|
||
(ACTION_HIRED, "Принят"),
|
||
(ACTION_DISMISSED, "Уволен"),
|
||
(ACTION_ON_LEAVE, "В отпуске"),
|
||
(ACTION_RETURNED_FROM_LEAVE, "Вернулся из отпуска"),
|
||
(ACTION_ON_MATERNITY, "В декрете"),
|
||
(ACTION_RETURNED_FROM_MATERNITY, "Вернулся из декрета"),
|
||
(ACTION_TRANSFERRED, "Переведен"),
|
||
(ACTION_REHIRED, "Восстановлен"),
|
||
]
|
||
|
||
|
||
class DeptPerm:
|
||
MANAGE = "manage_department"
|
||
CHANGE_HEAD = "change_department_head"
|
||
ASSIGN_ROLE = "assign_department_role"
|
||
MANAGE_CALENDAR = "manage_department_events"
|
||
CREATE_POST = "publish_department_post"
|
||
MANAGE_FEED = "manage_department_feed"
|
||
VIEW_REQUESTCOMMENT = "view_requestcomment"
|
||
ADD_REQUESTCOMMENT = "add_requestcomment"
|
||
VIEW_REQUEST = "view_request"
|
||
CAN_PROCESS_REQUESTS = "can_process_requests"
|
||
MANAGE_EQUIPMENT = "manage_department_equipment"
|
||
|
||
CHOICES = (
|
||
(MANAGE, "Управлять отделом"),
|
||
(CHANGE_HEAD, "Назначать руководителя"),
|
||
(ASSIGN_ROLE, "Назначать роли участникам"),
|
||
(MANAGE_CALENDAR, "Управлять календарём отдела"),
|
||
(CREATE_POST, "Публиковать новости на странице отдела"),
|
||
(MANAGE_FEED, "Редактировать публикации отдела"),
|
||
(VIEW_REQUESTCOMMENT, "Просмотр комментариев по заявлениям"),
|
||
(ADD_REQUESTCOMMENT, "Добавление коментариев по заявлениям"),
|
||
(VIEW_REQUEST, "Просмотр заявлений отдела"),
|
||
(CAN_PROCESS_REQUESTS, "Рассмотрение заявлений отдела"),
|
||
(MANAGE_EQUIPMENT, "Управлять оборудованием отдела"),
|
||
)
|