mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-02-27 22:00:59 -05:00
17061e0d06
in the db, we have several rows for single permissions - we separate `send_messages` into `send_texts`, `send_emails` and `send_letters`, and also `manage_service` into `manage_users` and `manage_settings`. But on the front end we don't do anything with this distinction. It's unhelpful for us to have to think about permissions as groups of things when we can never split them up at all. So we should combine them. This commit makes sure: * when user models are read (from JSON direct from the API), we should transform them from db permissions into roles. * when permissions are persisted (editing permissions, and creating invites), we should send db permissions to the API. All other interaction with permissions (should just be the endpoint decorator and checks in html templates generally) should use admin roles.
58 lines
2.1 KiB
Python
58 lines
2.1 KiB
Python
from app.notify_client import NotifyAdminAPIClient, _attach_current_user
|
|
from app.notify_client.models import (
|
|
InvitedUser,
|
|
translate_permissions_from_admin_roles_to_db,
|
|
)
|
|
|
|
|
|
class InviteApiClient(NotifyAdminAPIClient):
|
|
def __init__(self):
|
|
super().__init__("a" * 73, "b")
|
|
|
|
def init_app(self, app):
|
|
super().init_app(app)
|
|
|
|
self.admin_url = app.config['ADMIN_BASE_URL']
|
|
|
|
def create_invite(self, invite_from_id, service_id, email_address, permissions, auth_type):
|
|
data = {
|
|
'service': str(service_id),
|
|
'email_address': email_address,
|
|
'from_user': invite_from_id,
|
|
'permissions': ','.join(sorted(translate_permissions_from_admin_roles_to_db(permissions))),
|
|
'auth_type': auth_type,
|
|
'invite_link_host': self.admin_url,
|
|
}
|
|
data = _attach_current_user(data)
|
|
resp = self.post(url='/service/{}/invite'.format(service_id), data=data)
|
|
return InvitedUser(**resp['data'])
|
|
|
|
def get_invites_for_service(self, service_id):
|
|
endpoint = '/service/{}/invite'.format(service_id)
|
|
resp = self.get(endpoint)
|
|
invites = resp['data']
|
|
invited_users = self._get_invited_users(invites)
|
|
return invited_users
|
|
|
|
def check_token(self, token):
|
|
resp = self.get(url='/invite/service/{}'.format(token))
|
|
return InvitedUser(**resp['data'])
|
|
|
|
def cancel_invited_user(self, service_id, invited_user_id):
|
|
data = {'status': 'cancelled'}
|
|
data = _attach_current_user(data)
|
|
self.post(url='/service/{0}/invite/{1}'.format(service_id, invited_user_id),
|
|
data=data)
|
|
|
|
def accept_invite(self, service_id, invited_user_id):
|
|
data = {'status': 'accepted'}
|
|
self.post(url='/service/{0}/invite/{1}'.format(service_id, invited_user_id),
|
|
data=data)
|
|
|
|
def _get_invited_users(self, invites):
|
|
invited_users = []
|
|
for invite in invites:
|
|
invited_user = InvitedUser(**invite)
|
|
invited_users.append(invited_user)
|
|
return invited_users
|