__copyright__ = "Copyright © Stichting SciPost (SciPost Foundation)" __license__ = "AGPL v3" import mimetypes from django.contrib import messages from django.contrib.auth.decorators import permission_required from django.contrib.auth.mixins import LoginRequiredMixin from django.core.exceptions import PermissionDenied from django.core.urlresolvers import reverse_lazy from django.http import Http404, HttpResponse from django.shortcuts import get_object_or_404, render from django.views.generic.detail import DetailView from django.views.generic.edit import CreateView, UpdateView, DeleteView from django.views.generic.list import ListView from .forms import SubsidyForm, SubsidyAttachmentForm, LogsFilter from .models import Subsidy, SubsidyAttachment, WorkLog from .utils import slug_to_id from scipost.mixins import PermissionsMixin ############# # Subsidies # ############# class SubsidyCreateView(PermissionsMixin, CreateView): """ Create a new Subsidy. """ permission_required = 'scipost.can_manage_subsidies' model = Subsidy form_class = SubsidyForm template_name = 'finances/subsidy_form.html' def get_success_url(self): return reverse_lazy('finances:subsidy_details', kwargs={'pk': self.object.id}) class SubsidyUpdateView(PermissionsMixin, UpdateView): """ Update a Subsidy. """ permission_required = 'scipost.can_manage_subsidies' model = Subsidy form_class = SubsidyForm template_name = 'finances/subsidy_form.html' def get_success_url(self): return reverse_lazy('finances:subsidy_details', kwargs={'pk': self.object.id}) class SubsidyDeleteView(PermissionsMixin, DeleteView): """ Delete a Subsidy. """ permission_required = 'scipost.can_manage_subsidies' model = Subsidy success_url = reverse_lazy('finances:subsidies') class SubsidyListView(ListView): model = Subsidy def get_queryset(self): qs = super().get_queryset() org = self.request.GET.get('org') if org: qs = qs.filter(organization__pk=org) order_by = self.request.GET.get('order_by') ordering = self.request.GET.get('ordering') if order_by == 'amount': qs = qs.filter(amount_publicly_shown=True).order_by('amount') elif order_by == 'date': qs = qs.order_by('date') elif order_by == 'until': qs = qs.order_by('date_until') if ordering == 'desc': qs = qs.reverse() return qs class SubsidyDetailView(DetailView): model = Subsidy class SubsidyAttachmentCreateView(PermissionsMixin, CreateView): """ Create a new SubsidyAttachment. """ permission_required = 'scipost.can_manage_subsidies' model = SubsidyAttachment form_class = SubsidyAttachmentForm template_name = 'finances/subsidyattachment_form.html' def get_success_url(self): return reverse_lazy('finances:subsidy_details', kwargs={'pk': self.object.subsidy.id}) def get_initial(self): subsidy = get_object_or_404(Subsidy, pk=self.kwargs.get('subsidy_id')) return {'subsidy': subsidy} class SubsidyAttachmentUpdateView(PermissionsMixin, UpdateView): """ Update a SubsidyAttachment. """ permission_required = 'scipost.can_manage_subsidies' model = SubsidyAttachment form_class = SubsidyAttachmentForm template_name = 'finances/subsidyattachment_form.html' success_url = reverse_lazy('finances:subsidies') def get_success_url(self): return reverse_lazy('finances:subsidy_details', kwargs={'pk': self.object.subsidy.id}) class SubsidyAttachmentDeleteView(PermissionsMixin, DeleteView): """ Delete a SubsidyAttachment. """ permission_required = 'scipost.can_manage_subsidies' model = SubsidyAttachment def get_success_url(self): return reverse_lazy('finances:subsidy_details', kwargs={'pk': self.object.subsidy.id}) def subsidy_attachment(request, subsidy_id, attachment_id): attachment = get_object_or_404(SubsidyAttachment.objects, subsidy__id=subsidy_id, id=attachment_id) if not attachment.visible_to_user(request.user): raise PermissionDenied content_type, encoding = mimetypes.guess_type(attachment.attachment.path) content_type = content_type or 'application/octet-stream' response = HttpResponse(attachment.attachment.read(), content_type=content_type) response["Content-Encoding"] = encoding response['Content-Disposition'] = ('filename=%s' % attachment.name) return response ############################ # Timesheets and Work Logs # ############################ @permission_required('scipost.can_view_timesheets', raise_exception=True) def timesheets(request): """ Overview of all timesheets including comments and related objects. """ form = LogsFilter(request.GET or None) context = {'form': form} return render(request, 'finances/timesheets.html', context) @permission_required('scipost.can_view_timesheets', raise_exception=True) def timesheets_detailed(request): """Overview of all timesheets. """ form = LogsFilter(request.GET or None) context = {'form': form} return render(request, 'finances/timesheets_detailed.html', context) class LogDeleteView(LoginRequiredMixin, DeleteView): model = WorkLog def get_object(self): try: return WorkLog.objects.get(user=self.request.user, id=slug_to_id(self.kwargs['slug'])) except WorkLog.DoesNotExist: raise Http404 def get_success_url(self): messages.success(self.request, 'Log deleted.') return self.object.content.get_absolute_url()