forked from CGM_Public/pretix_original
df0b580dd6
* Data model draft * Refactor query and assignment usages of old permissions * Backend UI * API serializer * Big string replace * Docs, tests and fixes for teams api * Update docs for device auth * Eliminate old names * Make tests pass * Use new permissions, remove inconsistencies * Add test for translations * Show plugin permissions * Add permission for seating plans * Fix plugin activation * Fix failing test * Refactor to permission groups * Update doc/api/resources/devices.rst Co-authored-by: luelista <weller@rami.io> * Update doc/api/resources/events.rst Co-authored-by: luelista <weller@rami.io> * Update src/pretix/api/serializers/organizer.py Co-authored-by: luelista <weller@rami.io> * Fix typo * Fix python version compat * Replacement after rebase * Add proper permission handling for exports * Docs for exporters * Runtime linting of permission names * Fix typos * Show export page even without orders permission * More legacy compat * Do not strongly validate before plugins are loaded * Rebase migration * Add permission for outgoing mails * Review notes * Update doc/api/resources/teams.rst Co-authored-by: Richard Schreiber <schreiber@pretix.eu> * Clean up logic around exporters * Review and failures * Fix migration leading to forbidden combination * Handle permissions on event copying * Remove print-statements * Make test clearer * Review feedback * Add AnyPermissionOf * migration safety --------- Co-authored-by: luelista <weller@rami.io> Co-authored-by: Richard Schreiber <schreiber@pretix.eu>
105 lines
4.2 KiB
Python
105 lines
4.2 KiB
Python
#
|
|
# This file is part of pretix (Community Edition).
|
|
#
|
|
# Copyright (C) 2014-2020 Raphael Michel and contributors
|
|
# Copyright (C) 2020-today pretix GmbH and contributors
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
|
|
# Public License as published by the Free Software Foundation in version 3 of the License.
|
|
#
|
|
# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
|
|
# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
|
|
# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
|
|
# this file, see <https://pretix.eu/about/en/license>.
|
|
#
|
|
# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
|
|
# details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License along with this program. If not, see
|
|
# <https://www.gnu.org/licenses/>.
|
|
#
|
|
import django_filters
|
|
from django_filters.rest_framework import DjangoFilterBackend, FilterSet
|
|
from django_scopes import scopes_disabled
|
|
from rest_framework import viewsets
|
|
from rest_framework.decorators import action
|
|
from rest_framework.exceptions import PermissionDenied, ValidationError
|
|
from rest_framework.response import Response
|
|
|
|
from pretix.api.pagination import TotalOrderingFilter
|
|
from pretix.api.serializers.waitinglist import WaitingListSerializer
|
|
from pretix.base.models import WaitingListEntry
|
|
from pretix.base.models.waitinglist import WaitingListException
|
|
|
|
with scopes_disabled():
|
|
class WaitingListFilter(FilterSet):
|
|
has_voucher = django_filters.rest_framework.BooleanFilter(method='has_voucher_qs')
|
|
|
|
def has_voucher_qs(self, queryset, name, value):
|
|
return queryset.filter(voucher__isnull=not value)
|
|
|
|
class Meta:
|
|
model = WaitingListEntry
|
|
fields = ['item', 'variation', 'email', 'locale', 'has_voucher', 'subevent']
|
|
|
|
|
|
class WaitingListViewSet(viewsets.ModelViewSet):
|
|
serializer_class = WaitingListSerializer
|
|
queryset = WaitingListEntry.objects.none()
|
|
filter_backends = (DjangoFilterBackend, TotalOrderingFilter)
|
|
ordering = ('created', 'pk',)
|
|
ordering_fields = ('id', 'created', 'email', 'item')
|
|
filterset_class = WaitingListFilter
|
|
permission = 'event.orders:read'
|
|
write_permission = 'event.orders:write'
|
|
|
|
def get_queryset(self):
|
|
return self.request.event.waitinglistentries.all()
|
|
|
|
def get_serializer_context(self):
|
|
ctx = super().get_serializer_context()
|
|
ctx['event'] = self.request.event
|
|
return ctx
|
|
|
|
def perform_create(self, serializer):
|
|
serializer.save(event=self.request.event)
|
|
serializer.instance.log_action(
|
|
'pretix.event.orders.waitinglist.added',
|
|
user=self.request.user,
|
|
auth=self.request.auth,
|
|
)
|
|
|
|
def perform_update(self, serializer):
|
|
if serializer.instance.voucher:
|
|
raise PermissionDenied('This entry can not be changed as it has already been assigned a voucher.')
|
|
serializer.save(event=self.request.event)
|
|
serializer.instance.log_action(
|
|
'pretix.event.orders.waitinglist.changed',
|
|
user=self.request.user,
|
|
auth=self.request.auth,
|
|
)
|
|
|
|
def perform_destroy(self, instance):
|
|
if instance.voucher:
|
|
raise PermissionDenied('This entry can not be deleted as it has already been assigned a voucher.')
|
|
|
|
instance.log_action(
|
|
'pretix.event.orders.waitinglist.deleted',
|
|
user=self.request.user,
|
|
auth=self.request.auth,
|
|
)
|
|
super().perform_destroy(instance)
|
|
|
|
@action(detail=True, methods=['POST'])
|
|
def send_voucher(self, *args, **kwargs):
|
|
try:
|
|
self.get_object().send_voucher(
|
|
user=self.request.user,
|
|
auth=self.request.auth,
|
|
)
|
|
except WaitingListException as e:
|
|
raise ValidationError(str(e))
|
|
else:
|
|
return Response(status=204)
|