1156 lines
43 KiB
Python
1156 lines
43 KiB
Python
from __future__ import annotations
|
||
|
||
|
||
import io
|
||
import posixpath
|
||
import zipfile
|
||
|
||
from django.contrib.auth import get_user_model
|
||
from django.contrib.contenttypes.models import ContentType
|
||
from django.db import transaction
|
||
from django.db.models import Count, Exists, OuterRef, QuerySet, Q
|
||
from django.http import FileResponse
|
||
from documents.models import (
|
||
Document,
|
||
DocumentAcknowledgement,
|
||
DocumentTag,
|
||
)
|
||
from easy_thumbnails.files import get_thumbnailer
|
||
from filer.models import Folder
|
||
import reversion
|
||
from reversion.models import Version
|
||
from rest_framework import status
|
||
from rest_framework.decorators import action
|
||
from rest_framework.exceptions import ValidationError
|
||
from rest_framework.parsers import FormParser, JSONParser, MultiPartParser
|
||
from rest_framework.permissions import IsAuthenticated
|
||
from rest_framework.response import Response
|
||
from rest_framework.viewsets import ModelViewSet
|
||
|
||
from ..employees.serializers import EmployeeBriefSerializer
|
||
from .permissions import DocumentReadOrModelPerms
|
||
from .serializers import (
|
||
DocumentReadSerializer,
|
||
DocumentWriteSerializer,
|
||
FolderSerializer,
|
||
VersionSerializer,
|
||
ActivityItemSerializer,
|
||
DocumentTagSerializer,
|
||
)
|
||
|
||
User = get_user_model()
|
||
|
||
|
||
class DocumentViewSet(ModelViewSet):
|
||
"""Полный CRUD по документам + экшен `acknowledge`.
|
||
|
||
Создание/обновление поддерживает multipart (для файла)
|
||
и назначение получателей.
|
||
"""
|
||
|
||
queryset: QuerySet[Document] = (
|
||
Document.objects.all()
|
||
.select_related("uploaded_by")
|
||
.prefetch_related("recipients")
|
||
)
|
||
permission_classes = [DocumentReadOrModelPerms]
|
||
parser_classes = (MultiPartParser, FormParser, JSONParser)
|
||
|
||
def get_serializer_class(self):
|
||
"""Возвращает сериализатор в зависимости от действия.
|
||
|
||
Returns:
|
||
type: Класс сериализатора для чтения/записи.
|
||
"""
|
||
if self.action in ("create", "update", "partial_update"):
|
||
return DocumentWriteSerializer
|
||
return DocumentReadSerializer
|
||
|
||
def get_queryset(self) -> QuerySet[Document]:
|
||
"""Базовый queryset + аннотация флага ознакомления
|
||
текущего пользователя.
|
||
|
||
Поддерживает параметр ?scope=mine для фильтрации документов,
|
||
доступных текущему пользователю.
|
||
|
||
Поддерживает параметр ?folder_id для фильтрации по папке.
|
||
Поддерживает параметр ?is_regulation=true для раздела регламентов.
|
||
|
||
Returns:
|
||
QuerySet[Document]: оптимизированный для списка без N+1.
|
||
"""
|
||
qs = super().get_queryset()
|
||
request = getattr(self, "request", None)
|
||
user = getattr(request, "user", None)
|
||
|
||
# Параметр scope из запроса
|
||
scope = ""
|
||
if request:
|
||
scope = request.query_params.get("scope", "").lower()
|
||
|
||
# Фильтрация по папке
|
||
folder_id = request.query_params.get("folder_id")
|
||
if folder_id is not None:
|
||
try:
|
||
qs = qs.filter(folder_id=int(folder_id))
|
||
except (ValueError, TypeError):
|
||
pass # Игнорируем некорректное значение
|
||
|
||
is_regulation = request.query_params.get("is_regulation")
|
||
if is_regulation is None:
|
||
is_regulation = request.query_params.get("regulation")
|
||
if is_regulation is not None:
|
||
normalized = is_regulation.strip().lower()
|
||
if normalized in {"1", "true", "yes", "on"}:
|
||
qs = qs.filter(is_regulation=True)
|
||
elif normalized in {"0", "false", "no", "off"}:
|
||
qs = qs.filter(is_regulation=False)
|
||
|
||
# Если scope=mine - показываем только доступные пользователю
|
||
if scope == "mine" and user and user.is_authenticated:
|
||
# Документы для всех ИЛИ где пользователь получатель
|
||
# ИЛИ в отделе ИЛИ автор
|
||
qs = qs.filter(
|
||
Q(sent_to_all=True)
|
||
| Q(recipients=user)
|
||
| Q(
|
||
departments__employeedepartment__employee=user,
|
||
departments__employeedepartment__is_active=True,
|
||
)
|
||
| Q(uploaded_by=user)
|
||
).distinct()
|
||
# Если нет НИКАКИХ модельных прав на документы - ограничиваем queryset
|
||
elif user and user.is_authenticated and not user.is_staff:
|
||
# Проверяем наличие любого права на модель Document
|
||
has_any_perm = (
|
||
user.has_perm("documents.view_document")
|
||
or user.has_perm("documents.add_document")
|
||
or user.has_perm("documents.change_document")
|
||
or user.has_perm("documents.delete_document")
|
||
)
|
||
if not has_any_perm:
|
||
# Ограничиваем доступ только документами, которые ему
|
||
# предназначены
|
||
qs = qs.filter(
|
||
Q(sent_to_all=True)
|
||
| Q(recipients=user)
|
||
| Q(
|
||
departments__employeedepartment__employee=user,
|
||
departments__employeedepartment__is_active=True,
|
||
)
|
||
| Q(uploaded_by=user)
|
||
).distinct()
|
||
|
||
# Для аутентифицированных аннотируем флаг "я ознакомился"
|
||
if user and user.is_authenticated:
|
||
subq = DocumentAcknowledgement.objects.filter(
|
||
document=OuterRef("pk"), user=user
|
||
)
|
||
qs = qs.annotate(_is_acknowledged=Exists(subq))
|
||
|
||
return qs.order_by("-uploaded_at")
|
||
|
||
def _attach_linked_task_payloads(self, documents: list[Document]) -> None:
|
||
"""Предзагрузить компактные бейджи задач для списка документов."""
|
||
if not documents:
|
||
return
|
||
|
||
user = getattr(self.request, "user", None)
|
||
document_ids = [document.id for document in documents]
|
||
mapping = {document_id: [] for document_id in document_ids}
|
||
|
||
if user and user.is_authenticated:
|
||
from tasks.access import task_board_access_q
|
||
from tasks.models import (
|
||
TaskBoard,
|
||
TaskLinkedObject,
|
||
TaskLinkedObjectKind,
|
||
)
|
||
|
||
document_ct = ContentType.objects.get_for_model(Document)
|
||
accessible_boards = TaskBoard.objects.filter(
|
||
is_archived=False,
|
||
).filter(task_board_access_q(user))
|
||
|
||
links = (
|
||
TaskLinkedObject.objects.filter(
|
||
kind=TaskLinkedObjectKind.DOCUMENT,
|
||
content_type=document_ct,
|
||
object_id__in=document_ids,
|
||
task__board__in=accessible_boards,
|
||
)
|
||
.select_related("task", "task__board", "task__column")
|
||
.order_by("object_id", "task__title", "task_id")
|
||
)
|
||
|
||
for link in links:
|
||
mapping.setdefault(link.object_id, []).append(
|
||
{
|
||
"link_id": link.id,
|
||
"id": link.task_id,
|
||
"title": link.task.title,
|
||
"board_id": link.task.board_id,
|
||
"board_name": link.task.board.name,
|
||
"column_id": link.task.column_id,
|
||
"column_name": link.task.column.name,
|
||
"column_color": link.task.column.color,
|
||
"priority": link.task.priority,
|
||
"priority_display": link.task.get_priority_display(),
|
||
}
|
||
)
|
||
|
||
for document in documents:
|
||
document._linked_task_payloads = mapping.get(document.id, [])
|
||
|
||
def list(self, request, *args, **kwargs):
|
||
queryset = self.filter_queryset(self.get_queryset())
|
||
|
||
page = self.paginate_queryset(queryset)
|
||
if page is not None:
|
||
self._attach_linked_task_payloads(list(page))
|
||
serializer = self.get_serializer(page, many=True)
|
||
return self.get_paginated_response(serializer.data)
|
||
|
||
documents = list(queryset)
|
||
self._attach_linked_task_payloads(documents)
|
||
serializer = self.get_serializer(documents, many=True)
|
||
return Response(serializer.data)
|
||
|
||
@transaction.atomic
|
||
def create(self, request, *args, **kwargs):
|
||
"""Создаёт документ и возвращает read-схему + recipient_count.
|
||
|
||
recipient_count:
|
||
- 0, если sent_to_all=True;
|
||
- число активных пользователей из переданных recipient_ids
|
||
(неактивные/несуществующие игнорируются).
|
||
"""
|
||
serializer = self.get_serializer(data=request.data)
|
||
serializer.is_valid(raise_exception=True)
|
||
|
||
# Сохраним нормализованные ID до save(), т.к. serializer.save() их
|
||
# вытаскивает.
|
||
input_recipient_ids = list(
|
||
serializer.validated_data.get("recipient_ids", [])
|
||
)
|
||
|
||
doc = serializer.save()
|
||
|
||
read = DocumentReadSerializer(doc, context={"request": request})
|
||
data = dict(read.data)
|
||
|
||
if doc.sent_to_all:
|
||
data["recipient_count"] = 0
|
||
else:
|
||
active_count = User.objects.filter(
|
||
is_active=True, id__in=input_recipient_ids
|
||
).aggregate(n=Count("id", distinct=True))["n"]
|
||
data["recipient_count"] = active_count
|
||
|
||
return Response(data, status=status.HTTP_201_CREATED)
|
||
|
||
def update(self, request, *args, **kwargs):
|
||
"""Полная замена документа.
|
||
|
||
Returns:
|
||
Response: Тело ответа в формате read-сериализатора (с file_url).
|
||
"""
|
||
partial = kwargs.pop("partial", False)
|
||
instance = self.get_object()
|
||
serializer = self.get_serializer(
|
||
instance, data=request.data, partial=partial
|
||
)
|
||
serializer.is_valid(raise_exception=True)
|
||
doc = serializer.save()
|
||
|
||
read = DocumentReadSerializer(doc, context={"request": request})
|
||
return Response(read.data, status=status.HTTP_200_OK)
|
||
|
||
def partial_update(self, request, *args, **kwargs):
|
||
"""Частичное обновление (PATCH) — аналогично update, но partial=True."""
|
||
kwargs["partial"] = True
|
||
return self.update(request, *args, **kwargs)
|
||
|
||
def _safe_archive_part(self, value: object, fallback: str) -> str:
|
||
"""Очищает часть ZIP-пути без потери кириллицы."""
|
||
raw = str(value or fallback)
|
||
cleaned = "".join(
|
||
"_" if char in {"/", "\\"} or ord(char) < 32 else char
|
||
for char in raw
|
||
).strip(" .")
|
||
return cleaned or fallback
|
||
|
||
def _unique_archive_path(
|
||
self, archive_path: str, used_paths: set[str]
|
||
) -> str:
|
||
"""Делает путь файла уникальным внутри архива."""
|
||
if archive_path not in used_paths:
|
||
used_paths.add(archive_path)
|
||
return archive_path
|
||
|
||
directory = posixpath.dirname(archive_path)
|
||
filename = posixpath.basename(archive_path)
|
||
stem, ext = posixpath.splitext(filename)
|
||
counter = 2
|
||
|
||
while True:
|
||
candidate_name = f"{stem} ({counter}){ext}"
|
||
candidate = (
|
||
posixpath.join(directory, candidate_name)
|
||
if directory
|
||
else candidate_name
|
||
)
|
||
if candidate not in used_paths:
|
||
used_paths.add(candidate)
|
||
return candidate
|
||
counter += 1
|
||
|
||
@action(detail=False, methods=["post"], url_path="archive")
|
||
def archive(self, request):
|
||
"""Выгрузить выбранные документы одним ZIP-архивом."""
|
||
raw_ids = request.data.get("document_ids", [])
|
||
if not isinstance(raw_ids, list):
|
||
return Response(
|
||
{"detail": "document_ids должен быть списком."},
|
||
status=status.HTTP_400_BAD_REQUEST,
|
||
)
|
||
|
||
document_ids: list[int] = []
|
||
for raw_id in raw_ids:
|
||
try:
|
||
document_ids.append(int(raw_id))
|
||
except (TypeError, ValueError):
|
||
continue
|
||
|
||
if not document_ids:
|
||
return Response(
|
||
{"detail": "Передайте хотя бы один документ."},
|
||
status=status.HTTP_400_BAD_REQUEST,
|
||
)
|
||
|
||
documents = (
|
||
self.get_queryset()
|
||
.filter(id__in=document_ids)
|
||
.select_related("file", "folder")
|
||
.order_by("title", "id")
|
||
)
|
||
|
||
archive_buffer = io.BytesIO()
|
||
used_file_paths: set[str] = set()
|
||
|
||
with zipfile.ZipFile(
|
||
archive_buffer, mode="w", compression=zipfile.ZIP_DEFLATED
|
||
) as zip_file:
|
||
for document in documents:
|
||
if not document.file:
|
||
continue
|
||
|
||
file_name = (
|
||
getattr(document.file, "original_filename", "")
|
||
or getattr(document.file, "name", "")
|
||
or document.title
|
||
or f"document-{document.id}"
|
||
)
|
||
safe_file_name = self._safe_archive_part(
|
||
file_name, f"document-{document.id}"
|
||
)
|
||
archive_path = self._unique_archive_path(
|
||
safe_file_name, used_file_paths
|
||
)
|
||
|
||
file_obj = document.file.file
|
||
try:
|
||
file_obj.open("rb")
|
||
zip_file.writestr(archive_path, file_obj.read())
|
||
finally:
|
||
file_obj.close()
|
||
|
||
archive_buffer.seek(0)
|
||
return FileResponse(
|
||
archive_buffer,
|
||
as_attachment=True,
|
||
filename="documents.zip",
|
||
content_type="application/zip",
|
||
)
|
||
|
||
@action(methods=["post"], detail=True)
|
||
def acknowledge(self, request, pk=None):
|
||
"""Отметить ознакомление текущего пользователя с документом.
|
||
|
||
Args:
|
||
request: DRF Request
|
||
pk: ID документа
|
||
|
||
Returns:
|
||
Response: {"ok": true, "already": bool}
|
||
"""
|
||
doc = self.get_object()
|
||
if not doc.acknowledgement_required:
|
||
return Response(
|
||
{
|
||
"detail": (
|
||
"Для этого документа не требуется подтверждение "
|
||
"ознакомления."
|
||
)
|
||
},
|
||
status=status.HTTP_400_BAD_REQUEST,
|
||
)
|
||
obj, created = DocumentAcknowledgement.objects.get_or_create(
|
||
document=doc, user=request.user
|
||
)
|
||
return Response({"ok": True, "already": not created})
|
||
|
||
@action(detail=True, methods=["get"])
|
||
def acknowledgements(self, request, pk=None):
|
||
"""Ведомость ознакомлений: доступна пользователям с доступом к документу.
|
||
|
||
Поддерживает ?search= для фильтра и отдаёт непагинированно.
|
||
"""
|
||
doc = self.get_object()
|
||
q = (request.query_params.get("search") or "").strip()
|
||
base = User.objects.filter(is_active=True)
|
||
|
||
if not doc.sent_to_all:
|
||
# Собираем ID получателей из recipients и departments
|
||
recipient_ids = set(doc.recipients.values_list("pk", flat=True))
|
||
|
||
# Добавляем активных сотрудников из отделов
|
||
for department in doc.departments.all():
|
||
recipient_ids.update(
|
||
emp.id for emp in department.active_employees
|
||
)
|
||
|
||
base = base.filter(pk__in=recipient_ids)
|
||
|
||
if q:
|
||
base = base.filter(
|
||
Q(email__icontains=q)
|
||
| Q(first_name__icontains=q)
|
||
| Q(last_name__icontains=q)
|
||
| Q(patronymic__icontains=q)
|
||
)
|
||
acked_qs = base.filter(document_acknowledgements__document=doc)
|
||
unacked_qs = base.exclude(pk__in=acked_qs.values("pk"))
|
||
|
||
acked = EmployeeBriefSerializer(
|
||
acked_qs, many=True, context={"request": request}
|
||
).data
|
||
unacked = EmployeeBriefSerializer(
|
||
unacked_qs, many=True, context={"request": request}
|
||
).data
|
||
# при желании подключите PageNumberPagination и верните {"acknowledged":
|
||
# page1, "unacknowledged": page2}
|
||
return Response(
|
||
{
|
||
"acknowledged": acked,
|
||
"unacknowledged": unacked,
|
||
"counts": {
|
||
"acknowledged": acked_qs.count(),
|
||
"unacknowledged": unacked_qs.count(),
|
||
"total": base.count(),
|
||
},
|
||
}
|
||
)
|
||
|
||
# -------------------------------------------------------------------------
|
||
# DJANGO-REVERSION ENDPOINTS
|
||
# -------------------------------------------------------------------------
|
||
|
||
@action(detail=True, methods=["get"])
|
||
def versions(self, request, pk=None):
|
||
"""Получить историю версий документа.
|
||
|
||
Returns:
|
||
[
|
||
{
|
||
"id": 1,
|
||
"revision_id": 123,
|
||
"date_created": "2026-02-28T10:00:00Z",
|
||
"user": {"id": 1, "full_name": "Иванов Иван"},
|
||
"comment": "Изменено описание",
|
||
"data": {"title": "...", "description": "..."}
|
||
},
|
||
...
|
||
]
|
||
"""
|
||
document = self.get_object()
|
||
|
||
# Получаем все версии документа
|
||
versions = Version.objects.get_for_object(document).select_related(
|
||
"revision", "revision__user"
|
||
)
|
||
|
||
serializer = VersionSerializer(versions, many=True)
|
||
return Response(serializer.data)
|
||
|
||
@action(detail=True, methods=["get"])
|
||
def activity(self, request, pk=None):
|
||
"""Получить timeline активности документа (версии + аудит).
|
||
|
||
Объединяет данные из:
|
||
- reversion.Version (изменения документа)
|
||
- DocumentAuditLog (аудит действий)
|
||
- DocumentAcknowledgement (ознакомления)
|
||
|
||
Returns:
|
||
[
|
||
{
|
||
"type": "version",
|
||
"timestamp": "2026-02-28T10:00:00Z",
|
||
"user": {"id": 1, "full_name": "Иванов Иван"},
|
||
"action": "Изменение документа",
|
||
"details": {
|
||
"comment": "...",
|
||
"fields": ["title", "description"],
|
||
}
|
||
},
|
||
{
|
||
"type": "audit",
|
||
"timestamp": "2026-02-28T09:00:00Z",
|
||
"user": {...},
|
||
"action": "Просмотрен",
|
||
"details": {"ip_address": "192.168.1.1"}
|
||
},
|
||
...
|
||
]
|
||
"""
|
||
document = self.get_object()
|
||
activity_items = []
|
||
|
||
# 1. Добавляем версии
|
||
versions = Version.objects.get_for_object(document).select_related(
|
||
"revision", "revision__user"
|
||
)
|
||
for version in versions:
|
||
user_data = None
|
||
if version.revision.user:
|
||
user = version.revision.user
|
||
user_data = {
|
||
"id": user.id,
|
||
"full_name": f"{user.last_name} {user.first_name}".strip(),
|
||
"avatar_url": getattr(user, "avatar_url", None),
|
||
}
|
||
|
||
activity_items.append(
|
||
{
|
||
"type": "version",
|
||
"timestamp": version.revision.date_created,
|
||
"user": user_data,
|
||
"action": "Изменение документа",
|
||
"details": {
|
||
"comment": version.revision.comment or "",
|
||
"version_id": version.id,
|
||
"revision_id": version.revision.id,
|
||
},
|
||
}
|
||
)
|
||
|
||
# 2. Добавляем аудит (если есть)
|
||
if hasattr(document, "audit_log"):
|
||
audit_logs = document.audit_log.all().select_related("user")[
|
||
:50
|
||
] # Ограничиваем 50 записями
|
||
for log in audit_logs:
|
||
user_data = None
|
||
if log.user:
|
||
user_data = {
|
||
"id": log.user.id,
|
||
"full_name": f"{log.user.last_name} {
|
||
log.user.first_name
|
||
}".strip(),
|
||
"avatar_url": getattr(log.user, "avatar_url", None),
|
||
}
|
||
|
||
activity_items.append(
|
||
{
|
||
"type": "audit",
|
||
"timestamp": log.timestamp,
|
||
"user": user_data,
|
||
"action": log.get_action_display(),
|
||
"details": {
|
||
"ip_address": log.ip_address,
|
||
"metadata": log.metadata,
|
||
},
|
||
}
|
||
)
|
||
|
||
# 3. Добавляем ознакомления
|
||
acknowledgements = DocumentAcknowledgement.objects.filter(
|
||
document=document
|
||
).select_related("user")[:50]
|
||
for ack in acknowledgements:
|
||
user_data = {
|
||
"id": ack.user.id,
|
||
"full_name": f"{ack.user.last_name} {
|
||
ack.user.first_name
|
||
}".strip(),
|
||
"avatar_url": getattr(ack.user, "avatar_url", None),
|
||
}
|
||
|
||
activity_items.append(
|
||
{
|
||
"type": "acknowledgement",
|
||
"timestamp": ack.acknowledged_at,
|
||
"user": user_data,
|
||
"action": "Ознакомление",
|
||
"details": None,
|
||
}
|
||
)
|
||
|
||
# Сортируем по времени (новые сверху)
|
||
activity_items.sort(key=lambda x: x["timestamp"], reverse=True)
|
||
|
||
serializer = ActivityItemSerializer(activity_items, many=True)
|
||
return Response(serializer.data)
|
||
|
||
@action(detail=True, methods=["post"])
|
||
def revert(self, request, pk=None):
|
||
"""Откатить документ к указанной версии.
|
||
|
||
Body:
|
||
{
|
||
"version_id": 123, // ID версии из reversion.Version
|
||
"comment": "Причина отката" // опционально
|
||
}
|
||
|
||
Returns:
|
||
Обновленный документ
|
||
|
||
Note:
|
||
Поле status не откатывается,
|
||
так как оно управляется через FSM transitions.
|
||
ManyToMany поля (departments, recipients, related_documents)
|
||
откатываются отдельно.
|
||
"""
|
||
document = self.get_object()
|
||
version_id = request.data.get("version_id")
|
||
comment = request.data.get("comment", "")
|
||
|
||
if not version_id:
|
||
return Response(
|
||
{"error": "version_id обязателен"},
|
||
status=status.HTTP_400_BAD_REQUEST,
|
||
)
|
||
|
||
try:
|
||
# Получаем версию
|
||
version = Version.objects.get(
|
||
id=version_id, object_id=str(document.pk)
|
||
)
|
||
version_data = version.field_dict
|
||
|
||
# Исключаем защищенные FSM поля и служебные поля
|
||
excluded_fields = [
|
||
"status",
|
||
"id",
|
||
"uploaded_at",
|
||
"modified_at",
|
||
"uploaded_by",
|
||
]
|
||
|
||
# ManyToMany поля нужно обрабатывать отдельно через .set()
|
||
m2m_fields = ["departments", "recipients", "related_documents"]
|
||
|
||
# Откатываем с комментарием
|
||
with reversion.create_revision():
|
||
# Собираем обычные поля для восстановления
|
||
updated_fields = []
|
||
for field, value in version_data.items():
|
||
if (
|
||
field not in excluded_fields
|
||
and field not in m2m_fields
|
||
and hasattr(document, field)
|
||
):
|
||
setattr(document, field, value)
|
||
updated_fields.append(field)
|
||
|
||
# Сохраняем с автором отката (чтобы ID был доступен для M2M)
|
||
document.modified_by = request.user
|
||
updated_fields.append("modified_by")
|
||
|
||
# ВАЖНО: Указываем update_fields, чтобы избежать проверки FSM
|
||
# protected=True
|
||
document.save(update_fields=updated_fields)
|
||
|
||
# Восстанавливаем ManyToMany поля
|
||
for m2m_field in m2m_fields:
|
||
if m2m_field in version_data:
|
||
m2m_manager = getattr(document, m2m_field)
|
||
m2m_value = version_data[m2m_field]
|
||
# version_data хранит список ID
|
||
if isinstance(m2m_value, list):
|
||
m2m_manager.set(m2m_value)
|
||
|
||
reversion.set_user(request.user)
|
||
reversion.set_comment(comment or f"Откат к версии {version_id}")
|
||
|
||
# Обновляем объект из базы
|
||
document.refresh_from_db()
|
||
serializer = self.get_serializer(document)
|
||
return Response(serializer.data)
|
||
|
||
except Version.DoesNotExist:
|
||
return Response(
|
||
{"error": "Версия не найдена"}, status=status.HTTP_404_NOT_FOUND
|
||
)
|
||
except Exception as e:
|
||
return Response(
|
||
{"error": str(e)}, status=status.HTTP_400_BAD_REQUEST
|
||
)
|
||
|
||
@action(detail=True, methods=["get"])
|
||
def thumbnail(self, request, pk=None):
|
||
"""Получить thumbnail документа.
|
||
|
||
Query параметры:
|
||
size: admin_thumbnail | small | medium | large (default: medium)
|
||
|
||
Returns:
|
||
Изображение thumbnail или 404,
|
||
если документ не является изображением/PDF
|
||
"""
|
||
document = self.get_object()
|
||
|
||
if not document.file:
|
||
return Response(
|
||
{"error": "У документа нет файла"},
|
||
status=status.HTTP_404_NOT_FOUND,
|
||
)
|
||
|
||
size = request.query_params.get("size", "medium")
|
||
allowed_sizes = ["admin_thumbnail", "small", "medium", "large"]
|
||
|
||
if size not in allowed_sizes:
|
||
return Response(
|
||
{
|
||
"error": f"Размер должен быть одним из: {
|
||
', '.join(allowed_sizes)
|
||
}"
|
||
},
|
||
status=status.HTTP_400_BAD_REQUEST,
|
||
)
|
||
|
||
try:
|
||
# Получаем thumbnailer для файла
|
||
thumbnailer = get_thumbnailer(document.file.file)
|
||
|
||
# Генерируем thumbnail используя alias из settings
|
||
thumbnail = thumbnailer[size]
|
||
|
||
# Возвращаем файл
|
||
return FileResponse(
|
||
open(thumbnail.path, "rb"), content_type="image/jpeg"
|
||
)
|
||
except Exception as e:
|
||
return Response(
|
||
{"error": f"Не удалось создать thumbnail: {str(e)}"},
|
||
status=status.HTTP_400_BAD_REQUEST,
|
||
)
|
||
|
||
# -------------------------------------------------------------------------
|
||
# RELATED DOCUMENTS ENDPOINTS
|
||
# -------------------------------------------------------------------------
|
||
|
||
@action(detail=True, methods=["get"])
|
||
def related(self, request, pk=None):
|
||
"""Получить связанные документы.
|
||
|
||
Returns:
|
||
Список связанных документов
|
||
"""
|
||
document = self.get_object()
|
||
related = document.related_documents.all()
|
||
serializer = DocumentReadSerializer(
|
||
related, many=True, context={"request": request}
|
||
)
|
||
return Response(serializer.data)
|
||
|
||
@action(detail=True, methods=["post"])
|
||
def add_related(self, request, pk=None):
|
||
"""Добавить связанный документ.
|
||
|
||
Body:
|
||
{"document_id": 123}
|
||
|
||
Returns:
|
||
{"status": "added"}
|
||
"""
|
||
document = self.get_object()
|
||
related_id = request.data.get("document_id")
|
||
|
||
if not related_id:
|
||
return Response(
|
||
{"error": "document_id обязателен"},
|
||
status=status.HTTP_400_BAD_REQUEST,
|
||
)
|
||
|
||
if related_id == document.pk:
|
||
return Response(
|
||
{"error": "Нельзя связать документ с самим собой"},
|
||
status=status.HTTP_400_BAD_REQUEST,
|
||
)
|
||
|
||
try:
|
||
related_doc = Document.objects.get(pk=related_id)
|
||
document.related_documents.add(related_doc)
|
||
return Response({"status": "added"})
|
||
except Document.DoesNotExist:
|
||
return Response(
|
||
{"error": "Документ не найден"},
|
||
status=status.HTTP_404_NOT_FOUND,
|
||
)
|
||
|
||
@action(detail=True, methods=["post"])
|
||
def remove_related(self, request, pk=None):
|
||
"""Удалить связанный документ.
|
||
|
||
Body:
|
||
{"document_id": 123}
|
||
|
||
Returns:
|
||
{"status": "removed"}
|
||
"""
|
||
document = self.get_object()
|
||
related_id = request.data.get("document_id")
|
||
|
||
if not related_id:
|
||
return Response(
|
||
{"error": "document_id обязателен"},
|
||
status=status.HTTP_400_BAD_REQUEST,
|
||
)
|
||
|
||
try:
|
||
related_doc = Document.objects.get(pk=related_id)
|
||
document.related_documents.remove(related_doc)
|
||
return Response({"status": "removed"})
|
||
except Document.DoesNotExist:
|
||
return Response(
|
||
{"error": "Документ не найден"},
|
||
status=status.HTTP_404_NOT_FOUND,
|
||
)
|
||
|
||
|
||
class FolderViewSet(ModelViewSet):
|
||
"""CRUD для папок документов (filer.Folder).
|
||
|
||
Поддерживает иерархическую структуру папок с parent/children связями.
|
||
"""
|
||
|
||
queryset = Folder.objects.all()
|
||
serializer_class = FolderSerializer
|
||
permission_classes = [IsAuthenticated]
|
||
|
||
def get_queryset(self):
|
||
"""Возвращает папки, опционально фильтрованные по parent_id.
|
||
|
||
Параметры:
|
||
?parent_id=<id> - показать только дочерние папки указанного parent
|
||
?root=true - показать только корневые папки (parent=null)
|
||
"""
|
||
from django.db.models import Count
|
||
|
||
qs = super().get_queryset()
|
||
request = getattr(self, "request", None)
|
||
|
||
# Аннотируем количество документов в каждой папке
|
||
qs = qs.annotate(document_count=Count("documents"))
|
||
|
||
if not request:
|
||
return qs
|
||
|
||
parent_id = request.query_params.get("parent_id")
|
||
root = request.query_params.get("root", "").lower() == "true"
|
||
|
||
if root:
|
||
qs = qs.filter(parent__isnull=True)
|
||
elif parent_id:
|
||
qs = qs.filter(parent_id=parent_id)
|
||
|
||
return qs.order_by("name")
|
||
|
||
@transaction.atomic
|
||
def create(self, request, *args, **kwargs):
|
||
"""Создать папку.
|
||
|
||
Body:
|
||
{
|
||
"name": "Название папки",
|
||
"parent": <id> | null // опционально
|
||
}
|
||
"""
|
||
serializer = self.get_serializer(data=request.data)
|
||
serializer.is_valid(raise_exception=True)
|
||
|
||
# Создаем папку
|
||
name = serializer.validated_data["name"]
|
||
parent_id = request.data.get("parent")
|
||
|
||
parent = None
|
||
if parent_id:
|
||
try:
|
||
parent = Folder.objects.get(pk=parent_id)
|
||
except Folder.DoesNotExist:
|
||
return Response(
|
||
{"error": "Родительская папка не найдена"},
|
||
status=status.HTTP_404_NOT_FOUND,
|
||
)
|
||
|
||
folder = Folder.objects.create(
|
||
name=name, parent=parent, owner=request.user
|
||
)
|
||
|
||
result = FolderSerializer(folder).data
|
||
return Response(result, status=status.HTTP_201_CREATED)
|
||
|
||
def _collect_descendant_folder_ids(self, folder: Folder) -> set[int]:
|
||
"""Возвращает ID папки и всех её подпапок."""
|
||
folder_ids = {folder.id}
|
||
current_level = [folder.id]
|
||
|
||
while current_level:
|
||
child_ids = list(
|
||
Folder.objects.filter(parent_id__in=current_level)
|
||
.values_list("id", flat=True)
|
||
)
|
||
folder_ids.update(child_ids)
|
||
current_level = child_ids
|
||
|
||
return folder_ids
|
||
|
||
def _collect_document_ids_for_delete(
|
||
self, folder_ids: set[int]
|
||
) -> set[int]:
|
||
"""Возвращает документы в папках и прямо связанные с ними."""
|
||
document_ids = set(
|
||
Document.objects.filter(folder_id__in=folder_ids)
|
||
.values_list("id", flat=True)
|
||
)
|
||
|
||
if not document_ids:
|
||
return document_ids
|
||
|
||
related_ids = set(
|
||
Document.objects.filter(related_documents__id__in=document_ids)
|
||
.values_list("id", flat=True)
|
||
)
|
||
document_ids.update(related_ids)
|
||
|
||
return document_ids
|
||
|
||
def _ensure_not_guest_managed_folders(self, folder_ids: set[int]):
|
||
from guests.models import Guest
|
||
|
||
if Guest.objects.filter(document_folder_id__in=folder_ids).exists():
|
||
raise ValidationError(
|
||
{
|
||
"detail": (
|
||
"Папка привязана к гостю. Изменяйте ее через "
|
||
"карточку гостя."
|
||
)
|
||
}
|
||
)
|
||
|
||
def update(self, request, *args, **kwargs):
|
||
folder = self.get_object()
|
||
self._ensure_not_guest_managed_folders({folder.id})
|
||
return super().update(request, *args, **kwargs)
|
||
|
||
def partial_update(self, request, *args, **kwargs):
|
||
kwargs["partial"] = True
|
||
return self.update(request, *args, **kwargs)
|
||
|
||
def _safe_archive_part(self, value: object, fallback: str) -> str:
|
||
"""Очищает часть ZIP-пути без потери кириллицы."""
|
||
raw = str(value or fallback)
|
||
cleaned = "".join(
|
||
"_" if char in {"/", "\\"} or ord(char) < 32 else char
|
||
for char in raw
|
||
).strip(" .")
|
||
return cleaned or fallback
|
||
|
||
def _unique_archive_path(
|
||
self, archive_path: str, used_paths: set[str]
|
||
) -> str:
|
||
"""Делает путь файла уникальным внутри архива."""
|
||
if archive_path not in used_paths:
|
||
used_paths.add(archive_path)
|
||
return archive_path
|
||
|
||
directory = posixpath.dirname(archive_path)
|
||
filename = posixpath.basename(archive_path)
|
||
stem, ext = posixpath.splitext(filename)
|
||
counter = 2
|
||
|
||
while True:
|
||
candidate_name = f"{stem} ({counter}){ext}"
|
||
candidate = (
|
||
posixpath.join(directory, candidate_name)
|
||
if directory
|
||
else candidate_name
|
||
)
|
||
if candidate not in used_paths:
|
||
used_paths.add(candidate)
|
||
return candidate
|
||
counter += 1
|
||
|
||
def _folder_archive_paths(
|
||
self, folder_ids: set[int]
|
||
) -> dict[int, str]:
|
||
"""Возвращает ZIP-пути для папок внутри удаляемого дерева."""
|
||
folders = {
|
||
folder.id: folder
|
||
for folder in Folder.objects.filter(id__in=folder_ids)
|
||
.select_related("parent")
|
||
}
|
||
archive_paths: dict[int, str] = {}
|
||
|
||
def build_path(folder: Folder) -> str:
|
||
if folder.id in archive_paths:
|
||
return archive_paths[folder.id]
|
||
|
||
folder_name = self._safe_archive_part(
|
||
folder.name, f"folder-{folder.id}"
|
||
)
|
||
if folder.parent_id in folders:
|
||
archive_path = posixpath.join(
|
||
build_path(folders[folder.parent_id]), folder_name
|
||
)
|
||
else:
|
||
archive_path = folder_name
|
||
|
||
archive_paths[folder.id] = archive_path
|
||
return archive_path
|
||
|
||
for folder in folders.values():
|
||
build_path(folder)
|
||
|
||
return archive_paths
|
||
|
||
@action(detail=True, methods=["get"], url_path="archive")
|
||
def archive(self, request, pk=None):
|
||
"""Выгрузить папку со всеми подпапками и документами в ZIP."""
|
||
folder = self.get_object()
|
||
folder_ids = self._collect_descendant_folder_ids(folder)
|
||
folder_paths = self._folder_archive_paths(folder_ids)
|
||
archive_buffer = io.BytesIO()
|
||
used_file_paths: set[str] = set()
|
||
|
||
documents = (
|
||
Document.objects.filter(folder_id__in=folder_ids)
|
||
.select_related("file", "folder")
|
||
.order_by("folder_id", "title", "id")
|
||
)
|
||
|
||
with zipfile.ZipFile(
|
||
archive_buffer, mode="w", compression=zipfile.ZIP_DEFLATED
|
||
) as zip_file:
|
||
for folder_id, archive_path in sorted(
|
||
folder_paths.items(), key=lambda item: item[1]
|
||
):
|
||
zip_file.writestr(f"{archive_path}/", b"")
|
||
|
||
for document in documents:
|
||
if not document.file:
|
||
continue
|
||
|
||
file_name = (
|
||
getattr(document.file, "original_filename", "")
|
||
or getattr(document.file, "name", "")
|
||
or document.title
|
||
or f"document-{document.id}"
|
||
)
|
||
safe_file_name = self._safe_archive_part(
|
||
file_name, f"document-{document.id}"
|
||
)
|
||
folder_path = folder_paths.get(document.folder_id, "")
|
||
archive_path = self._unique_archive_path(
|
||
posixpath.join(folder_path, safe_file_name),
|
||
used_file_paths,
|
||
)
|
||
|
||
file_obj = document.file.file
|
||
try:
|
||
file_obj.open("rb")
|
||
zip_file.writestr(archive_path, file_obj.read())
|
||
finally:
|
||
file_obj.close()
|
||
|
||
archive_buffer.seek(0)
|
||
archive_name = f"{self._safe_archive_part(folder.name, 'folder')}.zip"
|
||
return FileResponse(
|
||
archive_buffer,
|
||
as_attachment=True,
|
||
filename=archive_name,
|
||
content_type="application/zip",
|
||
)
|
||
|
||
@transaction.atomic
|
||
def destroy(self, request, *args, **kwargs):
|
||
"""Удаляет папку вместе с подпапками и связанными документами."""
|
||
folder = self.get_object()
|
||
folder_ids = self._collect_descendant_folder_ids(folder)
|
||
self._ensure_not_guest_managed_folders(folder_ids)
|
||
document_ids = self._collect_document_ids_for_delete(folder_ids)
|
||
|
||
if document_ids:
|
||
Document.objects.filter(id__in=document_ids).delete()
|
||
|
||
Folder.objects.filter(id__in=folder_ids).delete()
|
||
|
||
return Response(status=status.HTTP_204_NO_CONTENT)
|
||
|
||
@action(detail=True, methods=["get"])
|
||
def children(self, request, pk=None):
|
||
"""Получить дочерние папки данной папки."""
|
||
folder = self.get_object()
|
||
children = folder.children.all().order_by("name")
|
||
serializer = self.get_serializer(children, many=True)
|
||
return Response(serializer.data)
|
||
|
||
@action(detail=True, methods=["get"])
|
||
def documents(self, request, pk=None):
|
||
"""Получить документы в данной папке."""
|
||
folder = self.get_object()
|
||
documents = Document.objects.filter(folder=folder)
|
||
serializer = DocumentReadSerializer(
|
||
documents, many=True, context={"request": request}
|
||
)
|
||
return Response(serializer.data)
|
||
|
||
|
||
class DocumentTagViewSet(ModelViewSet):
|
||
"""CRUD для тегов документов.
|
||
|
||
Теги используются для категоризации документов.
|
||
"""
|
||
|
||
queryset = DocumentTag.objects.all()
|
||
serializer_class = DocumentTagSerializer
|
||
permission_classes = [IsAuthenticated]
|
||
|
||
def get_queryset(self):
|
||
"""Возвращает теги, опционально с аннотацией количества документов."""
|
||
qs = super().get_queryset()
|
||
|
||
# Аннотируем количество документов для каждого тега
|
||
qs = qs.annotate(document_count=Count("documents"))
|
||
|
||
# Поиск по названию
|
||
search = self.request.query_params.get("search", "")
|
||
if search:
|
||
qs = qs.filter(
|
||
Q(name__icontains=search) | Q(description__icontains=search)
|
||
)
|
||
|
||
return qs.order_by("name")
|
||
|
||
@action(detail=True, methods=["get"])
|
||
def documents(self, request, pk=None):
|
||
"""Получить все документы с этим тегом."""
|
||
tag = self.get_object()
|
||
documents = tag.documents.all()
|
||
serializer = DocumentReadSerializer(
|
||
documents, many=True, context={"request": request}
|
||
)
|
||
return Response(serializer.data)
|