mirror of
https://github.com/pretix/pretix.git
synced 2026-08-19 12:16:26 +00:00
All of our API endpoints that do something in the system do at least two SQL queries, one for the actual change and one for the log entry. Often many more. We want all of this to happen in a transaction so we know an API call was executed or not at all, not half-way.
152 lines
6.3 KiB
Python
152 lines
6.3 KiB
Python
#
|
|
# This file is part of pretix (Community Edition).
|
|
#
|
|
# Copyright (C) 2014-2020 Raphael Michel and contributors
|
|
# Copyright (C) 2020-today pretix GmbH and contributors
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
|
|
# Public License as published by the Free Software Foundation in version 3 of the License.
|
|
#
|
|
# ADDITIONAL TERMS APPLY: Pursuant to Section 7 of the GNU Affero General Public License, additional terms are
|
|
# applicable granting you additional permissions and placing additional restrictions on your usage of this software.
|
|
# Please refer to the pretix LICENSE file to obtain the full terms applicable to this work. If you did not receive
|
|
# this file, see <https://pretix.eu/about/en/license>.
|
|
#
|
|
# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
|
|
# details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License along with this program. If not, see
|
|
# <https://www.gnu.org/licenses/>.
|
|
#
|
|
from django.core.exceptions import ValidationError
|
|
from django.db import transaction
|
|
from django_filters.rest_framework import DjangoFilterBackend, FilterSet
|
|
from django_scopes import scopes_disabled
|
|
from rest_framework import viewsets
|
|
|
|
from pretix.api.pagination import TotalOrderingFilter
|
|
from pretix.api.serializers.i18n import I18nAwareModelSerializer
|
|
from pretix.base.models import Order
|
|
from pretix.plugins.sendmail.models import Rule
|
|
|
|
|
|
class RuleSerializer(I18nAwareModelSerializer):
|
|
class Meta:
|
|
model = Rule
|
|
fields = ['id', 'subject', 'template', 'all_products', 'limit_products', 'restrict_to_status',
|
|
'checked_in_status', 'send_date', 'send_offset_days', 'send_offset_time', 'date_is_absolute',
|
|
'offset_to_event_end', 'offset_is_after', 'send_to', 'enabled']
|
|
read_only_fields = ['id']
|
|
|
|
def to_internal_value(self, data):
|
|
if "restrict_to_status" not in data:
|
|
if "include_pending" in data:
|
|
if data["include_pending"]:
|
|
data['restrict_to_status'] = [
|
|
Order.STATUS_PAID,
|
|
'n__not_pending_approval_and_not_valid_if_pending',
|
|
'n__valid_if_pending'
|
|
]
|
|
else:
|
|
data['restrict_to_status'] = [Order.STATUS_PAID, 'n__valid_if_pending']
|
|
else:
|
|
data['restrict_to_status'] = [Order.STATUS_PAID, 'n__valid_if_pending']
|
|
return super().to_internal_value(data)
|
|
|
|
def validate(self, data):
|
|
data = super().validate(data)
|
|
|
|
full_data = self.to_internal_value(self.to_representation(self.instance)) if self.instance else {}
|
|
full_data.update(data)
|
|
|
|
if full_data.get('date_is_absolute') is not False:
|
|
if any([k in data for k in ['offset_to_event_end', 'offset_is_after']]):
|
|
raise ValidationError('date_is_absolute and offset_* are mutually exclusive')
|
|
if not full_data.get('send_date'):
|
|
raise ValidationError('send_date is required for date_is_absolute=True')
|
|
else:
|
|
if not all([full_data.get(k) is not None for k in ['send_offset_days', 'send_offset_time']]):
|
|
raise ValidationError('send_offset_days and send_offset_time are required for date_is_absolute=False')
|
|
|
|
if full_data.get('all_products') is False:
|
|
if not full_data.get('limit_products'):
|
|
raise ValidationError('limit_products is required when all_products=False')
|
|
|
|
rts = full_data.get('restrict_to_status')
|
|
if not rts or rts == []:
|
|
raise ValidationError('restrict_to_status needs at least one value')
|
|
elif rts:
|
|
for s in rts:
|
|
if s not in [
|
|
Order.STATUS_PAID,
|
|
Order.STATUS_EXPIRED,
|
|
Order.STATUS_CANCELED,
|
|
'n__valid_if_pending',
|
|
'n__pending_overdue',
|
|
'n__pending_approval',
|
|
'n__not_pending_approval_and_not_valid_if_pending',
|
|
]:
|
|
raise ValidationError(f'status {s} not allowed: restrict_to_status may only include valid states')
|
|
|
|
if full_data.get('checked_in_status') == "":
|
|
# even though "blank" is not allowed on this field, "" gets accepted without this check
|
|
raise ValidationError('empty string not allowed: use null to disable check-in based filtering')
|
|
|
|
return full_data
|
|
|
|
def save(self, **kwargs):
|
|
return super().save(event=self.context['request'].event)
|
|
|
|
|
|
with scopes_disabled():
|
|
class RuleFilter(FilterSet):
|
|
class Meta:
|
|
model = Rule
|
|
fields = ['id', 'all_products', 'date_is_absolute',
|
|
'offset_to_event_end', 'offset_is_after', 'send_to', 'enabled']
|
|
|
|
|
|
class RuleViewSet(viewsets.ModelViewSet):
|
|
queryset = Rule.objects.none()
|
|
serializer_class = RuleSerializer
|
|
filter_backends = (DjangoFilterBackend, TotalOrderingFilter)
|
|
filterset_class = RuleFilter
|
|
ordering = ('id',)
|
|
ordering_fields = ('id',)
|
|
permission = 'event.settings.general:write'
|
|
|
|
def get_queryset(self):
|
|
return Rule.objects.filter(event=self.request.event)
|
|
|
|
@transaction.atomic()
|
|
def perform_create(self, serializer):
|
|
super().perform_create(serializer)
|
|
serializer.instance.log_action(
|
|
'pretix.plugins.sendmail.rule.added',
|
|
user=self.request.user,
|
|
auth=self.request.auth,
|
|
data=self.request.data
|
|
|
|
)
|
|
|
|
@transaction.atomic()
|
|
def perform_update(self, serializer):
|
|
super().perform_update(serializer)
|
|
serializer.instance.log_action(
|
|
'pretix.plugins.sendmail.rule.changed',
|
|
user=self.request.user,
|
|
auth=self.request.auth,
|
|
data=self.request.data
|
|
)
|
|
|
|
@transaction.atomic()
|
|
def perform_destroy(self, instance):
|
|
instance.log_action(
|
|
'pretix.plugins.sendmail.rule.deleted',
|
|
user=self.request.user,
|
|
auth=self.request.auth,
|
|
data=self.request.data
|
|
)
|
|
super().perform_destroy(instance)
|