U
    iPda                     @   s2   d dl T d dlmZ d dlZG dd dejZdS )    )*)cmf_project_perm_schemeNc                       s   e Zd ZdZ fddZ fddZ fddZedd	 Zed
d Z	e
edddd ZededddZededddZ  ZS )CmfProjectPermSchemeNc                    s   t j  | jrt jjdd}ddddddd	d
ddddg}t jj||dD ]6}t  }| |_|D ]}t||t	|| q`|
  qJt j
||S )Nsystem:defaultcodeproject_permissionaccess_project_roleaccess_membersaccess_local_useraccess_owneraccess_owner_assistantaccess_authoraccess_project_owneraccess_responsibleaccess_sdesk_clientaccess_anonymousaccess_guestparentfields)modelsr   trigger_reloadis_newgetCmfProjectPermSchemeRulelistr   setattrgetattrsavesuper)selfargskwargsdefault_schemerule_fieldsdefault_rulerulefield	__class__ 3./modules/project/models/cmf_project_perm_scheme.pyr       s(    
      
zCmfProjectPermScheme.savec           
         s   | j }t j||}|rtjjdd}ddddddd	d
ddddg}tjj||dD ]:}t }| |_|D ]}	t	||	t
||	 qh|jdd qR|S )Nr   r   r   r	   r
   r   r   r   r   r   r   r   r   r   r   T)Zsave_import)r   r    _save_importr   r   r   r   r   r   r   r   r   )
r!   r"   r#   r   resr$   r%   r&   r'   r(   r)   r+   r,   r-   2   s*          z!CmfProjectPermScheme._save_importc                    sf   t jj| dgd}|r<ddd |D }td| dd t jj| d	D ]}|  qJt j||S )
Nname)project_perm_schemer   z, c                 S   s   g | ]}d |j  d qS )")r/   ).0pr+   r+   r,   
<listcomp>H   s     z/CmfProjectPermScheme.delete.<locals>.<listcomp>u   Невозможно удалить Схему проектных прав, она используется в проектах: T)abort)r   )r   
CmfProjectr   join	cmf_alertr   deleter    )r!   r"   r#   Zused_projectsZused_projects_strr'   r)   r+   r,   r9   E   s    

zCmfProjectPermScheme.deletec                 C   sp  t   }i i i i i i i d}i }tjjddddgdD ]}t t t t t t t d}i }i }tjjdd|gd	d
gdD ]f}|jr|jsqg }	|jD ]4}
|
jdkr|
j	
 D ]}|	| qq|	|
 q|	sq|	||jjj< q|jjj|kr,tjj|jddddddddddddgd||jjj< ||jjj D ]}|jr\|d |jjj |jrx|d |jjj |jr|d |jjj |jr|d |jjj |jr|d |jjj |jrL|jr|d |jjj nZtjjdd}||jjg D ]:}|jj|kr0t ||jj< ||jj |jjj q|jrh|d |jjj |jrtj }|jj|krt ||jj< ||jj |jjj |j r2|j!jj|krt ||j!jj< ||j!jj |jjj |j"D ]:}|jj|krt ||jj< ||jj |jjj q|j#r||j#D ]:}|jj|kr`t ||jj< ||jj |jjj q@|j$r:|j$D ]`}|jj|krq||jj D ]:}|jj|krt ||jj< ||jj |jjj qqq:|% D ],\}}||kri ||< ||| |jj< q|% D ]\}}||| |jj< q.q6|t&_'t()dt   |  d d S )N)r   access_sdesk_publicr   r   r   r   r   r0   	cmf_ownercmf_owner_assistantsservicedesk_public)r   r   =memberszproject_role.codefilterr   Z
CmfCompanyr	   r
   r   r   r   r   r   r   project_permission.coder   r   r   r   r:   zsdesk-client:defaultr   zLoad time _PROJECT_PERM_DATA: Zsec)*timer   r6   r   setCmfProjectRoleAssignr?   project_role
class_nameZpersonsloadappendidvaluer0   r   r   addr   r   r   r   r   r   r   r=   ZCmfProjectRoler   r   r   ZCmfPersonGroupZguest_groupr   r;   r<   r
   r	   itemsr   _PROJECT_PERM_DATAgdebug)clsZ
start_timeZ	perm_dataZloaded_scheme_rulesprojectZproject_permsZproject_user_permsZproject_role_membersrZ_membersmr3   r'   Zsdesk_client_rolememberZguest_person_groupZproject_owner_assistantZroleZuser_idpermZperm_funr+   r+   r,   load_project_permission_dataO   s     


      



$
z1CmfProjectPermScheme.load_project_permission_datac                 C   s   t d tdd  d S )Nz"project_permission::reload triggerCmfProjectPermScheme:changed)printZcmf_emit_server_event)rQ   r+   r+   r,   r      s    z#CmfProjectPermScheme.trigger_reloadrX   )Zchannelc                  K   s"   dd }t d dat| d S )Nc                	   S   s~   t d td trrt d datj > tj	  t
jjdtt dddrftd	 t  W 5 Q R X nt d
 d S )Nz*project_permission::reload handler spawned   z,project_permission::reload handler do reloadFz&project_permission::clear_jscache:lockTi  )ZnxZpxz?project_permission::reload handler do CMF_CACHE.flush_jscache()z'project_permission::reload handler skip)rY   rC   sleep_project_permission_changedcmfZappZcmf_contextr   r   rW   ZREDIS_DBZredisrD   strosgetpidrO   rP   Z	CMF_CACHEZflush_jscacher+   r+   r+   r,   handler   s    


zBCmfProjectPermScheme.on_project_permission_change.<locals>.handlerz(project_permission::reload spawn handlerT)rY   r\   ZgeventZspawn)_kwargsra   r+   r+   r,   on_project_permission_change   s    z1CmfProjectPermScheme.on_project_permission_changeT)r   c           
   
   C   s  |d krt j}|j  tjjdd|jgdd|ggdddddd	d
dgd}|sRdS |jrb|jrbdS |j	rv|t j
krvdS |jr||jkrdS |js|js|js|jr|std| d |r|jr||jkrdS |jr||jkrdS |jr||jkrdS |jr||jkrdS |jr,||j kr,dS |jrztjjdd|gdd|jggdgd}|D ]}||j kr\ dS q\|sdS tjj|dgd}	td|	j d|j d| d S )Nr   r>   rB   r	   r
   r   r   r   r   r   r   r@   Tu*   DEV: check_project_role_access Право u_    разрешено для объектного поля, но объект не переданrF   INr?   Fr/   r   r   N   У пользователя нет Проектного разрешения "   " в проекте     для объекта )rO   current_userr0   rH   r   r   r   r   
user_localr   anonymous_userr   r;   r   r   r   r   r8   Zcmf_owner_assistant
cmf_authorresponsibler
   Z
all_nestedr	   rE   r   r?   CmfProjectPermPermissionCmfPermissionErrorr/   )
rQ   rR   r   userobjraise_errorrV   Zrole_assignsZrole_assign	perm_infor+   r+   r,   check_project_role_access_old  sn    
   





z2CmfProjectPermScheme.check_project_role_access_oldc           
      C   sF  t jst jrdS |d kr&t j}t j}ntjj|dd}t|t	j
jrJ|j}|jdkr^|jj}nl|jjrn|jjs||ddg |jjr|jjr|jjr|jj}q|jj}n"|jjr|jjr|jj}n|jj}|| jd krt d| d|  dS |jj| jkr2|| j|jj kr2|| j|jj | kr2dS |D ]<}|| jkr6|| j| kr6|| j| | kr6 dS q6|jr|| jd	 | krdS |t jkr|| jd
 | krdS || jd | kr|jjr||jjkrdS n||jkrdS || jd | krP|j  |jjr@|jjrP||jjkrPdS n||jkrPdS || jd | kr|j  |jjr||jjkrdS n||jkrdS || jd | kr|j  |jjr||jjkrdS n||jkrdS || jd | kr|jrdS |sdS tjj |dgd}	t!d|	j" d|j" d| d S )NT)Zid_onlyr6   root_parent_id	parent_idr   uX   Пропустили проверку Проектных прав для объекта u3   , т.к. проект еще не загружен r   r   r   r   r   r:   Fr/   re   rf   rg   rh   )#rO   Zdisable_permissionsZacl_admin_moderi   current_person__member_ofr   ZCmfAccessListZsubject_full_group_list
isinstancer]   r   ZCmfTyperK   rG   rJ   ru   Z
is_definedrv   Zload_fieldsZ
is_changedoldrN   rP   rj   rk   r;   r<   rH   rl   rm   Zservicedesk_allowrn   r   ro   r/   )
rQ   rR   r   rp   rq   rr   rw   Zobj_parent_idZcontainer_idrs   r+   r+   r,   check_project_role_accessP  s    





 






z.CmfProjectPermScheme.check_project_role_access)NNT)NNT)__name__
__module____qualname__rN   r   r-   r9   classmethodrW   r   staticmethodZon_server_eventrc   r^   rt   rz   __classcell__r+   r+   r)   r,   r      s    

 
Hr   )Zcmf.includeZmodules.project.fieldsr   rC   r   r+   r+   r+   r,   <module>   s   