115 lines
3.4 KiB
Python
115 lines
3.4 KiB
Python
from flask import Blueprint, g
|
|
from marshmallow import fields
|
|
from sqlalchemy import or_
|
|
|
|
from grant.extensions import limiter
|
|
from grant.parser import body
|
|
from grant.utils.auth import (
|
|
requires_auth,
|
|
requires_email_verified_auth,
|
|
get_authed_user
|
|
)
|
|
from grant.utils.auth import requires_ccr_owner_auth
|
|
from grant.utils.enums import CCRStatus
|
|
from grant.utils.exceptions import ValidationException
|
|
from .models import CCR, ccr_schema, ccrs_schema, db
|
|
|
|
blueprint = Blueprint("ccr", __name__, url_prefix="/api/v1/ccrs")
|
|
|
|
|
|
@blueprint.route("/<ccr_id>", methods=["GET"])
|
|
def get_ccr(ccr_id):
|
|
ccr = CCR.query.filter_by(id=ccr_id).first()
|
|
if ccr:
|
|
if ccr.status != CCRStatus.LIVE:
|
|
if CCR.status == CCRStatus.DELETED:
|
|
return {"message": "CCR was deleted"}, 404
|
|
authed_user = get_authed_user()
|
|
|
|
if authed_user.id != ccr.author.id:
|
|
return {"message": "User cannot view this CCR"}, 404
|
|
return ccr_schema.dump(ccr)
|
|
else:
|
|
return {"message": "No CCR matching id"}, 404
|
|
|
|
|
|
@blueprint.route("/drafts", methods=["POST"])
|
|
@limiter.limit("10/hour;3/minute")
|
|
@requires_email_verified_auth
|
|
def make_ccr_draft():
|
|
user = g.current_user
|
|
ccr = CCR.create(status=CCRStatus.DRAFT, user_id=user.id)
|
|
db.session.commit()
|
|
return ccr_schema.dump(ccr), 201
|
|
|
|
|
|
@blueprint.route("/drafts", methods=["GET"])
|
|
@requires_auth
|
|
def get_ccr_drafts():
|
|
ccrs = (
|
|
CCR.query
|
|
.filter_by(user_id=g.current_user.id)
|
|
.filter(or_(
|
|
CCR.status == CCRStatus.DRAFT,
|
|
CCR.status == CCRStatus.REJECTED,
|
|
))
|
|
.order_by(CCR.date_created.desc())
|
|
.all()
|
|
)
|
|
return ccrs_schema.dump(ccrs), 200
|
|
|
|
|
|
@blueprint.route("/<ccr_id>", methods=["DELETE"])
|
|
@requires_ccr_owner_auth
|
|
def delete_ccr(ccr_id):
|
|
deleteable_statuses = [
|
|
CCRStatus.DRAFT,
|
|
CCRStatus.PENDING,
|
|
CCRStatus.APPROVED,
|
|
CCRStatus.REJECTED,
|
|
CCRStatus.REJECTED_PERMANENTLY
|
|
]
|
|
status = g.current_ccr.status
|
|
if status not in deleteable_statuses:
|
|
return {"message": "Cannot delete CCRs with %s status" % status}, 400
|
|
db.session.delete(g.current_ccr)
|
|
db.session.commit()
|
|
return {"message": "ok"}, 202
|
|
|
|
|
|
@blueprint.route("/<ccr_id>", methods=["PUT"])
|
|
@requires_ccr_owner_auth
|
|
@body({
|
|
"title": fields.Str(required=True),
|
|
"brief": fields.Str(required=True),
|
|
"content": fields.Str(required=True),
|
|
"target": fields.Str(required=True, allow_none=True),
|
|
})
|
|
def update_ccr(ccr_id, **kwargs):
|
|
try:
|
|
if g.current_ccr.status not in [CCRStatus.DRAFT,
|
|
CCRStatus.REJECTED]:
|
|
raise ValidationException(
|
|
f"CCR with status: {g.current_ccr.status} are not authorized for updates"
|
|
)
|
|
g.current_ccr.update(**kwargs)
|
|
except ValidationException as e:
|
|
return {"message": "{}".format(str(e))}, 400
|
|
db.session.add(g.current_ccr)
|
|
|
|
# Commit
|
|
db.session.commit()
|
|
return ccr_schema.dump(g.current_ccr), 200
|
|
|
|
|
|
@blueprint.route("/<ccr_id>/submit_for_approval", methods=["PUT"])
|
|
@requires_ccr_owner_auth
|
|
def submit_for_approval_ccr(ccr_id):
|
|
try:
|
|
g.current_ccr.submit_for_approval()
|
|
except ValidationException as e:
|
|
return {"message": "{}".format(str(e))}, 400
|
|
db.session.add(g.current_ccr)
|
|
db.session.commit()
|
|
return ccr_schema.dump(g.current_ccr), 200
|