summaryrefslogtreecommitdiff
path: root/web-server/opendc/models_old/authorization.py
diff options
context:
space:
mode:
authorGeorgios Andreadis <info@gandreadis.com>2020-06-29 16:05:23 +0200
committerFabian Mastenbroek <mail.fabianm@gmail.com>2020-08-24 16:18:36 +0200
commit4f9a40abdc7836345113c047f27fcc96800cb3f5 (patch)
treee443d14e34a884b1a4d9c549f81d51202eddd5f7 /web-server/opendc/models_old/authorization.py
parentcd5f7bf3a72913e1602cb4c575e61ac7d5519be0 (diff)
Prepare web-server repository for monorepo
This change prepares the web-server Git repository for the monorepo residing at https://github.com/atlarge-research.com/opendc. To accomodate for this, we move all files into a web-server subdirectory.
Diffstat (limited to 'web-server/opendc/models_old/authorization.py')
-rw-r--r--web-server/opendc/models_old/authorization.py45
1 files changed, 45 insertions, 0 deletions
diff --git a/web-server/opendc/models_old/authorization.py b/web-server/opendc/models_old/authorization.py
new file mode 100644
index 00000000..43d784e9
--- /dev/null
+++ b/web-server/opendc/models_old/authorization.py
@@ -0,0 +1,45 @@
+from opendc.models_old.model import Model
+from opendc.models_old.user import User
+
+
+class Authorization(Model):
+ JSON_TO_PYTHON_DICT = {
+ 'Authorization': {
+ 'userId': 'user_id',
+ 'simulationId': 'simulation_id',
+ 'authorizationLevel': 'authorization_level'
+ }
+ }
+
+ COLLECTION_NAME = 'authorizations'
+ COLUMNS = ['user_id', 'simulation_id', 'authorization_level']
+ COLUMNS_PRIMARY_KEY = ['user_id', 'simulation_id']
+
+ def google_id_has_at_least(self, google_id, authorization_level):
+ """Return True if the User has at least the given auth level over this Authorization."""
+
+ authorization = Authorization.from_primary_key((User.from_google_id(google_id).id, self.simulation_id))
+
+ if authorization is None:
+ return False
+
+ return authorization.has_at_least(authorization_level)
+
+ def has_at_least(self, required_level):
+ """Return True if this Authorization has at least the required level."""
+
+ if not self.exists():
+ return False
+
+ authorization_levels = ['VIEW', 'EDIT', 'OWN']
+
+ try:
+ index_actual = authorization_levels.index(self.authorization_level)
+ index_required = authorization_levels.index(required_level)
+ except:
+ return False
+
+ if index_actual >= index_required:
+ return True
+ else:
+ return False