Merge branch 'master' into v7.0

[osm/LW-UI.git] / rolehandler / views.py

diff --git a/rolehandler/views.py b/rolehandler/views.py
index f6a0799..dba444d 100644 (file)
--- a/rolehandler/views.py
+++ b/rolehandler/views.py
@@ -17,6 +17,7 @@
 from django.shortcuts import render, redirect
 from sf_t3d.decorators import login_required
 from django.http import HttpResponse
+import yaml
 import json
 import logging
 import authosm.utils as osmutils
@@ -41,9 +42,21 @@ def role_list(request):
 def create(request):
     user = osmutils.get_user(request)
     client = Client()
-    role_data ={
-       'name'
+    role_data = {
+       'name': request.POST['name'],
     }
+    try:
+        if 'permissions' in request.POST and request.POST.get('permissions') != '':
+            role_permissions = yaml.load(request.POST.get('permissions'))
+
+            if not isinstance(role_permissions, dict):
+                raise ValueError('Role permissions should be provided in a key-value fashion')
+            for key, value in role_permissions.items():
+                if not isinstance(value, bool):
+                    raise ValueError("Value of '{}' in a role permissionss should be boolean".format(key))
+                role_data[key] = value
+    except Exception as e:
+        return __response_handler(request, {'status': 400, 'code': 'BAD_REQUEST', 'detail': e.message}, url=None, status=400)
     result = client.role_create(user.get_token(), role_data)
     if result['error']:
         return __response_handler(request, result['data'], url=None,
@@ -67,23 +80,55 @@ def delete(request, role_id=None):
     else:
         return __response_handler(request, {}, url=None, status=200)
 
+
 @login_required
 def update(request, role_id=None):
+    user = osmutils.get_user(request)
+    client = Client()
+    payload = {
+        'name': request.POST['name'],
+        'permissions': {}
+    }
+    try:
+        if 'permissions' in request.POST and request.POST.get('permissions') != '':
+            role_permissions = yaml.load(request.POST.get('permissions'))
+
+            if not isinstance(role_permissions, dict):
+                    raise ValueError('Role permissions should be provided in a key-value fashion')
+            for key, value in role_permissions.items():
+                if not isinstance(value, bool):
+                    raise ValueError('Value in a role permissions should be boolean')
+                payload['permissions'][key] = value
+    except Exception as e:
+        return __response_handler(request, {'status': 400, 'code': 'BAD_REQUEST', 'detail': e.message}, url=None, status=400)
+    result = client.role_update(user.get_token(), role_id, payload)
+    if result['error']:
+        return __response_handler(request, result['data'], url=None,
+                                  status=result['data']['status'] if 'status' in result['data'] else 500)
+    else:
+        return __response_handler(request, {}, url=None, status=200)
+
+
+@login_required
+def get(request, role_id=None):
     user = osmutils.get_user(request)
     try:
         client = Client()
-        payload = {}
-        if request.POST.get('name') and request.POST.get('name') is not '':
-            payload["name"] = request.POST.get('name')
-        update_res = client.role_update(user.get_token(), role_id, payload)
+        get_res = client.role_get(user.get_token(), role_id)
     except Exception as e:
         log.exception(e)
-        update_res = {'error': True, 'data': str(e)}
-    if update_res['error']:
-        return __response_handler(request, update_res['data'], url=None,
-                                  status=update_res['data']['status'] if 'status' in update_res['data'] else 500)
+        get_res = {'error': True, 'data': str(e)}
+    if get_res['error']:
+        return __response_handler(request, get_res['data'], url=None,
+                                  status=get_res['data']['status'] if 'status' in get_res['data'] else 500)
     else:
-        return __response_handler(request, {}, url=None, status=200)
+        role = get_res['data']
+        result = {
+            '_id': role['_id'],
+            'name': role['name'],
+            'permissions': {key: value for key, value in role['permissions'].items() if key not in ['_id', 'name', 'root', '_admin'] }
+        }
+        return __response_handler(request, result, url=None, status=200)
 
 
 def __response_handler(request, data_res, url=None, to_redirect=None, *args, **kwargs):