Fix #515 -- Add check-in lists (#693)

* Data model and migration

* Some backwards compatibility

* CRUD for checkin lists

* Show and perform checkins

* Correct numbers in table and dashboard widget

* event creation and cloning

* Allow to link specific exports and pass options per query

* Play with the CSV export

* PDF export

* Collapse exports by default

* Improve PDF exporter

* Addon stuff

* Subevent stuff, pretixdroid tests

* pretixdroid tests

* Add CRUD API

* Test compatibility

* Fix test

* DB-independent sorting behavior

* Add CRUD and coyp tests

* Re-enable pretixdroid plugin

* pretixdroid config

* Tests & fixes

src/pretix/api/serializers/checkin.py

@@ -0,0 +1,37 @@
+from django.utils.translation import ugettext as _
+from rest_framework import serializers
+from rest_framework.exceptions import ValidationError
+
+from pretix.api.serializers.i18n import I18nAwareModelSerializer
+from pretix.base.models import CheckinList
+
+
+class CheckinListSerializer(I18nAwareModelSerializer):
+    checkin_count = serializers.IntegerField(read_only=True)
+    position_count = serializers.IntegerField(read_only=True)
+
+    class Meta:
+        model = CheckinList
+        fields = ('id', 'name', 'all_products', 'limit_products', 'subevent', 'checkin_count', 'position_count')
+
+    def validate(self, data):
+        data = super().validate(data)
+        event = self.context['event']
+
+        full_data = self.to_internal_value(self.to_representation(self.instance)) if self.instance else {}
+        full_data.update(data)
+
+        for item in full_data.get('limit_products'):
+            if event != item.event:
+                raise ValidationError(_('One or more items do not belong to this event.'))
+
+        if event.has_subevents:
+            if not full_data.get('subevent'):
+                raise ValidationError(_('Subevent cannot be null for event series.'))
+            if event != full_data.get('subevent').event:
+                raise ValidationError(_('The subevent does not belong to this event.'))
+        else:
+            if full_data.get('subevent'):
+                raise ValidationError(_('The subevent does not belong to this event.'))
+
+        return data

src/pretix/api/templates/rest_framework/api.html

@@ -1,19 +0,0 @@
-{% extends "rest_framework/base.html" %}
-{% load staticfiles %}
-{% load compress %}
-
-{% block bootstrap_theme %}
-    {% compress css %}
-        <link rel="stylesheet" type="text/x-scss" href="{% static "rest_framework/scss/main.scss" %}" />
-    {% endcompress %}
-{% endblock %}
-{% block branding %}
-    <a class="navbar-brand" href="/api/v1/">pretix REST API</a>
-{% endblock %}
-{% block description %}
-    <div class="alert alert-info alert-docs-link">
-        <a href="https://docs.pretix.eu/en/latest/api/index.html">
-            You can find documentation on our REST API on docs.pretix.eu.
-        </a>
-    </div>
-{% endblock %}

src/pretix/api/urls.py

@@ -4,7 +4,7 @@ from django.apps import apps
 from django.conf.urls import include, url
 from rest_framework import routers
 
-from .views import event, item, order, organizer, voucher, waitinglist
+from .views import checkin, event, item, order, organizer, voucher, waitinglist
 
 router = routers.DefaultRouter()
 router.register(r'organizers', organizer.OrganizerViewSet)
@@ -24,6 +24,7 @@ event_router.register(r'orderpositions', order.OrderPositionViewSet)
 event_router.register(r'invoices', order.InvoiceViewSet)
 event_router.register(r'taxrules', event.TaxRuleViewSet)
 event_router.register(r'waitinglistentries', waitinglist.WaitingListViewSet)
+event_router.register(r'checkinlists', checkin.CheckinListViewSet)
 
 # Force import of all plugins to give them a chance to register URLs with the router
 for app in apps.get_app_configs():

src/pretix/api/views/checkin.py

@@ -0,0 +1,59 @@
+from django_filters.rest_framework import DjangoFilterBackend, FilterSet
+from rest_framework import viewsets
+
+from pretix.api.serializers.checkin import CheckinListSerializer
+from pretix.base.models import CheckinList
+from pretix.base.models.organizer import TeamAPIToken
+
+
+class CheckinListFilter(FilterSet):
+    class Meta:
+        model = CheckinList
+        fields = ['subevent']
+
+
+class CheckinListViewSet(viewsets.ModelViewSet):
+    serializer_class = CheckinListSerializer
+    queryset = CheckinList.objects.none()
+    filter_backends = (DjangoFilterBackend,)
+    filter_class = CheckinListFilter
+    permission = 'can_view_orders'
+    write_permission = 'can_change_event_settings'
+
+    def get_queryset(self):
+        qs = self.request.event.checkin_lists.prefetch_related(
+            'limit_products',
+        )
+        qs = CheckinList.annotate_with_numbers(qs, self.request.event)
+        return qs
+
+    def perform_create(self, serializer):
+        serializer.save(event=self.request.event)
+        serializer.instance.log_action(
+            'pretix.event.checkinlist.added',
+            user=self.request.user,
+            api_token=(self.request.auth if isinstance(self.request.auth, TeamAPIToken) else None),
+            data=self.request.data
+        )
+
+    def get_serializer_context(self):
+        ctx = super().get_serializer_context()
+        ctx['event'] = self.request.event
+        return ctx
+
+    def perform_update(self, serializer):
+        serializer.save(event=self.request.event)
+        serializer.instance.log_action(
+            'pretix.event.checkinlist.changed',
+            user=self.request.user,
+            api_token=(self.request.auth if isinstance(self.request.auth, TeamAPIToken) else None),
+            data=self.request.data
+        )
+
+    def perform_destroy(self, instance):
+        instance.log_action(
+            'pretix.event.checkinlist.deleted',
+            user=self.request.user,
+            api_token=(self.request.auth if isinstance(self.request.auth, TeamAPIToken) else None),
+        )
+        super().perform_destroy(instance)