forked from CGM_Public/pretix_original
Raphael Michel
5c448279f0
All of our API endpoints that do something in the system do at least two SQL queries, one for the actual change and one for the log entry. Often many more. We want all of this to happen in a transaction so we know an API call was executed or not at all, not half-way.
109 lines
4.3 KiB
Python
109 lines
4.3 KiB
Python
#
|
|
# This file is part of pretix (Community Edition).
|
|
#
|
|
# Copyright (C) 2014-2020 Raphael Michel and contributors
|
|
# Copyright (C) 2020-today pretix GmbH and contributors
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
|
|
# Public License as published by the Free Software Foundation in version 3 of the License.
|
|
#
|
|
# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
|
|
# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
|
|
# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
|
|
# this file, see <https://pretix.eu/about/en/license>.
|
|
#
|
|
# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
|
|
# details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License along with this program. If not, see
|
|
# <https://www.gnu.org/licenses/>.
|
|
#
|
|
import django_filters
|
|
from django.db import transaction
|
|
from django_filters.rest_framework import DjangoFilterBackend, FilterSet
|
|
from django_scopes import scopes_disabled
|
|
from rest_framework import viewsets
|
|
from rest_framework.decorators import action
|
|
from rest_framework.exceptions import PermissionDenied, ValidationError
|
|
from rest_framework.response import Response
|
|
|
|
from pretix.api.pagination import TotalOrderingFilter
|
|
from pretix.api.serializers.waitinglist import WaitingListSerializer
|
|
from pretix.base.models import WaitingListEntry
|
|
from pretix.base.models.waitinglist import WaitingListException
|
|
|
|
with scopes_disabled():
|
|
class WaitingListFilter(FilterSet):
|
|
has_voucher = django_filters.rest_framework.BooleanFilter(method='has_voucher_qs')
|
|
|
|
def has_voucher_qs(self, queryset, name, value):
|
|
return queryset.filter(voucher__isnull=not value)
|
|
|
|
class Meta:
|
|
model = WaitingListEntry
|
|
fields = ['item', 'variation', 'email', 'locale', 'has_voucher', 'subevent']
|
|
|
|
|
|
class WaitingListViewSet(viewsets.ModelViewSet):
|
|
serializer_class = WaitingListSerializer
|
|
queryset = WaitingListEntry.objects.none()
|
|
filter_backends = (DjangoFilterBackend, TotalOrderingFilter)
|
|
ordering = ('created', 'pk',)
|
|
ordering_fields = ('id', 'created', 'email', 'item')
|
|
filterset_class = WaitingListFilter
|
|
permission = 'event.orders:read'
|
|
write_permission = 'event.orders:write'
|
|
|
|
def get_queryset(self):
|
|
return self.request.event.waitinglistentries.all()
|
|
|
|
def get_serializer_context(self):
|
|
ctx = super().get_serializer_context()
|
|
ctx['event'] = self.request.event
|
|
return ctx
|
|
|
|
@transaction.atomic()
|
|
def perform_create(self, serializer):
|
|
serializer.save(event=self.request.event)
|
|
serializer.instance.log_action(
|
|
'pretix.event.orders.waitinglist.added',
|
|
user=self.request.user,
|
|
auth=self.request.auth,
|
|
)
|
|
|
|
@transaction.atomic()
|
|
def perform_update(self, serializer):
|
|
if serializer.instance.voucher:
|
|
raise PermissionDenied('This entry can not be changed as it has already been assigned a voucher.')
|
|
serializer.save(event=self.request.event)
|
|
serializer.instance.log_action(
|
|
'pretix.event.orders.waitinglist.changed',
|
|
user=self.request.user,
|
|
auth=self.request.auth,
|
|
)
|
|
|
|
@transaction.atomic()
|
|
def perform_destroy(self, instance):
|
|
if instance.voucher:
|
|
raise PermissionDenied('This entry can not be deleted as it has already been assigned a voucher.')
|
|
|
|
instance.log_action(
|
|
'pretix.event.orders.waitinglist.deleted',
|
|
user=self.request.user,
|
|
auth=self.request.auth,
|
|
)
|
|
super().perform_destroy(instance)
|
|
|
|
@action(detail=True, methods=['POST'])
|
|
def send_voucher(self, *args, **kwargs):
|
|
try:
|
|
self.get_object().send_voucher(
|
|
user=self.request.user,
|
|
auth=self.request.auth,
|
|
)
|
|
except WaitingListException as e:
|
|
raise ValidationError(str(e))
|
|
else:
|
|
return Response(status=204)
|