Mirrored_Repos/InvenTree
1
0
Fork 0
mirror of https://github.com/inventree/InvenTree synced 2024-08-30 18:33:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed context permissions for superuser with no group assigned

Browse Source
This commit is contained in:
eeintech 2020-10-06 09:59:51 -05:00
parent 279b50d977
commit 1ce2166843
1 changed files with 26 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
InvenTree/InvenTree/context.py
View File

@ -7,6 +7,8 @@ Provides extra global data to all templates.
from InvenTree.status_codes import SalesOrderStatus, PurchaseOrderStatus from InvenTree.status_codes import SalesOrderStatus, PurchaseOrderStatus
from InvenTree.status_codes import BuildStatus, StockStatus from InvenTree.status_codes import BuildStatus, StockStatus
from users.models import RuleSet
def status_codes(request): def status_codes(request):
@ -38,22 +40,31 @@ def user_roles(request):
roles = { roles = {
} }
for group in user.groups.all(): if user.is_superuser:
for rule in group.rule_sets.all(): for ruleset in RuleSet.RULESET_MODELS.keys():
roles[ruleset] = {
'view': True,
'add': True,
'change': True,
'delete': True,
}
else:
for group in user.groups.all():
for rule in group.rule_sets.all():
# Ensure the role name is in the dict # Ensure the role name is in the dict
if rule.name not in roles: if rule.name not in roles:
roles[rule.name] = { roles[rule.name] = {
'view': user.is_superuser, 'view': user.is_superuser,
'add': user.is_superuser, 'add': user.is_superuser,
'change': user.is_superuser, 'change': user.is_superuser,
'delete': user.is_superuser 'delete': user.is_superuser
} }
# Roles are additive across groups # Roles are additive across groups
roles[rule.name]['view'] |= rule.can_view roles[rule.name]['view'] |= rule.can_view
roles[rule.name]['add'] |= rule.can_add roles[rule.name]['add'] |= rule.can_add
roles[rule.name]['change'] |= rule.can_change roles[rule.name]['change'] |= rule.can_change
roles[rule.name]['delete'] |= rule.can_delete roles[rule.name]['delete'] |= rule.can_delete
return {'roles': roles} return {'roles': roles}