+ return qs
+
+class ControllerRole(PlCoreBase):
+ #objects = ControllerLinkManager()
+ #deleted_objects = ControllerLinkDeletionManager()
+
+ ROLE_CHOICES = (('admin','Admin'),)
+ role = models.CharField(choices=ROLE_CHOICES, unique=True, max_length=30)
+
+ def __unicode__(self): return u'%s' % (self.role)
+
+class ControllerPrivilege(PlCoreBase):
+ objects = ControllerLinkManager()
+ deleted_objects = ControllerLinkDeletionManager()
+
+ user = models.ForeignKey('User', related_name='controllerprivileges')
+ controller = models.ForeignKey('Controller', related_name='controllerprivileges')
+ role = models.ForeignKey('ControllerRole',related_name='controllerprivileges')
+
+ def __unicode__(self): return u'%s %s %s' % (self.controller, self.user, self.role)
+
+ def can_update(self, user):
+ if user.is_readonly:
+ return False
+ if user.is_admin:
+ return True
+ cprivs = ControllerPrivilege.objects.filter(user=user)
+ for cpriv in dprivs:
+ if cpriv.role.role == 'admin':
+ return True
+ return False
+
+ @staticmethod
+ def select_by_user(user):
+ if user.is_admin:
+ qs = ControllerPrivilege.objects.all()
+ else:
+ cpriv_ids = [cp.id for cp in ControllerPrivilege.objects.filter(user=user)]
+ qs = ControllerPrivilege.objects.filter(id__in=cpriv_ids)