X-Git-Url: http://git.onelab.eu/?p=plstackapi.git;a=blobdiff_plain;f=planetstack%2Fapigen%2Fapi.template.py;fp=planetstack%2Fapigen%2Fapi.template.py;h=de05fe6a405ca5a6383fd543fcd4825309c38e9e;hp=690bb135432eac292cc9d0cd6ae8845c9f1b6e48;hb=e3bbcf622e692f93fcc62ff7be7f49a206249b6c;hpb=eb62ad61ef3ca0b8dd5e641ac8e841eb0f17e8ae

diff --git a/planetstack/apigen/api.template.py b/planetstack/apigen/api.template.py
index 690bb13..de05fe6 100644
--- a/planetstack/apigen/api.template.py
+++ b/planetstack/apigen/api.template.py
@@ -59,9 +59,39 @@ serializerLookUp = {
 class {{ object.camel }}List(generics.ListCreateAPIView):
     queryset = {{ object.camel }}.objects.select_related.all()
     serializer_class = {{ object.camel }}Serializer
+    
+    def get_queryset(self):
+        return {{ object.camel }}.select_by_user(self.request.user)
+
+    def create(self, request, *args, **kwargs):
+        #obj = {{ object.camel }}().update(request.DATA)
+        obj = self.get_object()
+        obj.caller = request.user
+        if obj.can_update(request.user):
+            return super({{ object.camel }}List, self).create(request, *args, **kwargs)
+        else:
+            return Response(status=status.HTTP_400_BAD_REQUEST)
 
 class {{ object.camel }}Detail(generics.RetrieveUpdateDestroyAPIView):
     queryset = {{ object.camel }}.objects.select_related.all()
     serializer_class = {{ object.camel }}Serializer
+    
+    def get_queryset(self):
+        return {{ object.camel }}.select_by_user(self.request.user)
+
+    def update(self, request, *args, **kwargs):
+        obj = self.get_object()
+        if obj.can_update(request.user):
+            return super({{ object.camel }}Detail, self).update(request, *args, **kwargs)
+        else:
+            return Response(status=status.HTTP_400_BAD_REQUEST)
+
+    def destroy(self, request, *args, **kwargs):
+        obj = self.get_object()
+        if obj.can_update(request.user):
+            return super({{ object.camel }}Detail, self).destroy(request, *args, **kwargs)
+        else:
+            return Response(status=status.HTTP_400_BAD_REQUEST)
+     
 
 {% endfor %}