remove deployment_auth.py and move deployment auth parameters to deployment model
[plstackapi.git] / planetstack / core / models / deployment.py
1 import os
2 from django.db import models
3 from core.models import PlCoreBase
4 from django.contrib.contenttypes import generic
5
6 # Create your models here.
7
8 class ManyToManyField_NoSyncdb(models.ManyToManyField):
9     def __init__(self, *args, **kwargs):
10         super(ManyToManyField_NoSyncdb, self).__init__(*args, **kwargs)
11         self.creates_table = False
12
13 class Deployment(PlCoreBase):
14     name = models.CharField(max_length=200, unique=True, help_text="Name of the Deployment")
15     admin_user = models.CharField(max_length=200, null=True, blank=True, help_text="Username of an admin user at this deployment")
16     admin_password = models.CharField(max_length=200, null=True, blank=True, help_text="Password of theadmin user at this deployment")
17     admin_tenant = models.CharField(max_length=200, null=True, blank=True, help_text="Name of the tenant the admin user belongs to") 
18     auth_url = models.CharField(max_length=200, null=True, blank=True, help_text="Auth url for the deployment")
19 #    sites = ManyToManyField_NoSyncdb('Site', through=Site.deployments.through, blank=True)
20
21     def __unicode__(self):  return u'%s' % (self.name)
22
23     
24 class DeploymentRole(PlCoreBase):
25
26     ROLE_CHOICES = (('admin','Admin'),)
27     role = models.CharField(choices=ROLE_CHOICES, unique=True, max_length=30)
28
29     def __unicode__(self):  return u'%s' % (self.role)
30
31 class DeploymentPrivilege(PlCoreBase):
32
33     user = models.ForeignKey('User', related_name='deployment_privileges')
34     deployment = models.ForeignKey('Deployment', related_name='deployment_privileges')
35     role = models.ForeignKey('DeploymentRole')
36
37     def __unicode__(self):  return u'%s %s %s' % (self.deployment, self.user, self.role)
38
39
40     def can_update(self, user):
41         if user.is_readonly:
42             return False
43         if user.is_admin:
44             return True
45         dprivs = DeploymentPrivilege.objects.filter(user=user)
46         for dpriv in dprivs:
47             if dpriv.role.role_type == 'admin':
48                 return True
49         return False
50
51     @staticmethod
52     def select_by_user(user):
53         if user.is_admin:
54             qs = DeploymentPrivilege.objects.all()
55         else:
56             dpriv_ids = [dp.id for dp in DeploymentPrivilege.objects.filter(user=user)]
57             qs = DeploymentPrivilege.objects.filter(id__in=dpriv_ids)
58         return qs