lhyt_shop/utils/permission.py

# coding=utf-8

from rest_framework import permissions

from apps.customer.models import Customer
from apps.WechatApplet.models import WechatApplet
from utils.exceptions import CustomError
from utils import response_error

class IsCustomerUser(permissions.BasePermission):
    def has_permission(self, request, view):
        if not request.user or not request.user.is_authenticated:
            return False
        if not request.user.is_customer():
            return False

        appid = request.GET.get('appid', None)
        if not appid:
            appid = request.POST.get('appid')
        try:
            app = WechatApplet.getByAppid(appid)
        except:
            return False
        customer = Customer.objects.filter(tenant_id=app.tenant_id, user_id=request.user.id).first()
        if not customer:
            return False
        request.customer = customer
        return True

class IsTenantUser(permissions.BasePermission):
    def has_permission(self, request, view):
        if not request.user or not request.user.is_authenticated:
            return False
        return request.user.is_tenant()

class IsAdministratorUser(permissions.BasePermission):
    def has_permission(self, request, view):
        if not request.user or not request.user.is_authenticated:
            return False
        return request.user.is_administrator()


decorator_with_arguments = lambda decorator: lambda *args, **kwargs: lambda func: decorator(func, *args, **kwargs)

@decorator_with_arguments
def permission_required(function, perm):
    def _function(viewset, *args, **kwargs):
        # user_id = viewset.request.META.get('HTTP_USER_ID')
        # token = viewset.request.META.get('HTTP_Authorization')
        # if user_id and token:
        #     try:
        #         user = User.objects.get(pk=user_id)
        #     except:
        #         return ForbiddenJSONResponse()

            # valid = token_generator.check_token(user, token)
            # if valid:
            #     request.user = user
            # viewset.request.user = user
        # else:
        #     return ForbiddenJSONResponse()

        if viewset.request.user.has_perm(perm):
            return function(viewset, *args, **kwargs)
        else:
            from django.contrib.auth.models import Permission
            ps = perm.split('.')
            try:
                p = Permission.objects.get(codename=ps[1], content_type__app_label=ps[0])
            except:
                raise CustomError(u"权限配置错误！")

            raise CustomError(u"您没有[%s-%s]权限，无法执行该操作，请联系管理员分配权限！" % (p.content_type.name, p.name))
    return _function