felicity-lims/felicity/api/gql/permissions.py
2023-04-10 14:23:31 +02:00

103 lines
2.4 KiB
Python

import logging
from apps.analysis.permissions import (
check_result_verification,
check_sample_verification,
)
from strawberry.permission import BasePermission
from . import auth_from_info
logging.basicConfig(level=logging.INFO)
logger = logging.getLogger(__name__)
class IsAuthenticated(BasePermission):
message = "You mst be authenticated"
async def has_permission(self, source, info, **kwargs):
is_authenticated, _ = await auth_from_info(info)
return is_authenticated
class IsActiveUser(BasePermission):
message = "You must be an active user"
async def has_permission(self, source, info, **kwargs):
is_authenticated, user = await auth_from_info(info)
if not is_authenticated:
return False
return user.is_active
class IsSuperUser(BasePermission):
message = "You dont have enough privileges"
async def has_permission(self, source, info, **kwargs):
is_authenticated, user = await auth_from_info(info)
if not is_authenticated:
return False
if not user.is_active:
return False
return user.is_superuser
class CanVerifySample(BasePermission):
message = "Action not allowed"
async def has_permission(self, source, info, **kwargs):
is_authenticated, user = await auth_from_info(info)
if not is_authenticated:
return False
if not user.is_active:
return False
try:
samples = kwargs.get("samples", [])
except KeyError:
samples = []
_, restricted, message, suggestion = await check_sample_verification(
samples, user
)
if restricted:
self.message = message + " " + suggestion
return False
return True
class CanVerifyAnalysisResult(BasePermission):
message = "Action not allowed"
async def has_permission(self, source, info, **kwargs):
is_authenticated, user = await auth_from_info(info)
if not is_authenticated:
return False
if not user.is_active:
return False
try:
analyses = kwargs.get("analyses", [])
except KeyError:
analyses = []
_, restricted, message, suggestion = await check_result_verification(
analyses, user
)
if restricted:
self.message = message + " " + suggestion
return False
return True