Changes between Version 2 and Version 3 of RowLevelPermissionsDeveloper

Timestamp:

Aug 6, 2006, 3:00:05 PM (18 years ago)

Author:

Chris Long

Comment:

--

RowLevelPermissionsDeveloper

@@ -8 +8 @@
 #!python
 class RowLevelPermission(models.Model):
-    type_id = models.PositiveIntegerField("'Type' ID")
-    type_ct = models.ForeignKey(ContentType, verbose_name="'Type' content type", related_name="type_ct")
+    model_id = models.PositiveIntegerField("'Type' ID")
+    model_ct = models.ForeignKey(ContentType, verbose_name="'Type' content model", related_name="model_ct")
     owner_id = models.PositiveIntegerField("'Owner' ID")
-    owner_ct = models.ForeignKey(ContentType, verbose_name="'Owner' content type", related_name="owner_ct")
+    owner_ct = models.ForeignKey(ContentType, verbose_name="'Owner' content model", related_name="owner_ct")
     negative = models.BooleanField()
     permission = models.ForeignKey(Permission)
     
-    type = models.GenericForeignKey(fk_field='type_id', ct_field='type_ct')
+    model = models.GenericForeignKey(fk_field='model_id', ct_field='model_ct')
     owner = models.GenericForeignKey(fk_field='owner_id', ct_field='owner_ct')
     
@@ -23 +23 @@
         verbose_name = _('row level permission')
         verbose_name_plural = _('row level permissions')
-        unique_together = (('type_ct', 'type_id', 'owner_id', 'owner_ct', 'permission'),)        
+        unique_together = (('model_ct', 'model_id', 'owner_id', 'owner_ct', 'permission'),)        
 }}}
 
@@ -36 +36 @@
         if getattr(new_class._meta, 'row_level_permissions', None):
             from django.contrib.auth.models import RowLevelPermission
-            gen_rel = django.db.models.GenericRelation(RowLevelPermission, object_id_field="type_id", content_type_field="type_ct")
+            gen_rel = django.db.models.GenericRelation(RowLevelPermission, object_id_field="model_id", content_model_field="model_ct")
             new_class.add_to_class("row_level_permissions", gen_rel)
 }}}
@@ -48 +48 @@
 #!python
 ...
-row_level_permissions_owned = models.GenericRelation(RowLevelPermission, object_id_field="owner_id", content_type_field="owner_ct", related_name="owner")
+row_level_permissions_owned = models.GenericRelation(RowLevelPermission, object_id_field="owner_id", content_model_field="owner_ct", related_name="owner")
 ...
 }}}
@@ -56 +56 @@
 == Checking of Row Level Permissions == 
 
-To be added soon.
+Checking of RLP are done in the following order: User RLP->Group RLP->User Model Level->Group Model Level. Stopping at the first positive or negative.
+
+The has_perm method has been modified to now check for row level permissions and has an optional parameter for a model instance, which is required to check row level permissions.
+
+{{{
+#!python
+    def has_perm(self, perm, object=None):
+        "Returns True if the user has the specified permission."
+        if not self.is_active:
+            return False
+        if self.is_superuser:
+            return True
+        if object and object._meta.row_level_permissions:
+            row_level_permission = self.check_row_level_permission(perm, object)
+            if row_level_permission is not None:
+                return row_level_permission
+        return perm in self.get_all_permissions()
+}}}
+
+The check_row_level_permission checks the user RLPs first and then checks the group RLPs. The user RLPs are determined by using a filter method. The group RLP uses an SQL query that works out to be:
+
+{{{
+#!sql
+SELECT rlp."negative" 
+        FROM "auth_user_groups" ug, "auth_rowlevelpermission" rlp 
+        WHERE rlp."owner_id"=ug."group_id" 
+        AND ug."user_id"=%s        
+        AND rlp."owner_ct_id"=%s
+        AND rlp."model_id"=%s
+        AND rlp."model_ct_id"=%s
+        AND rlp."permission_id"=%s;
+}}}
 
 == Integration into Administration Application ==