perms

perms.py

from django.db.models import Q, F
from perms.spaces import QueryPermissionSpace
from repo.models import Project

space = QueryPermissionSpace()


@space.query_resolver('project.*')
def resolve_project_perms(perm, user):
    return Project.objects.filter(
        Q(teams__users=user) & (
            Q(teams__is_owner_team=True) | Q(teams__permissions__slug=perm)
        ) | Q(namespace__organization__teams__users=user) & (
            Q(namespace__organization__teams__projects__pk=F('pk')) | Q(namespace__organization__teams__is_all_projects=True)
        ) & (
            Q(namespace__organization__teams__is_owner_team=True) | Q(namespace__organization__teams__permissions__slug=perm)
        )
    )


# can the user perform this? (uses query then .count() != 0)
space.perm('project.edit').can_perform(user, proj)

# for what objects can the user perform this? (uses the query)
space.perm('project.edit').where_can_perform(user)