bornhack-website/src/economy/mixins.py

from django.http import HttpResponseRedirect, Http404


class ExpensePermissionMixin(object):
    """
    This mixin checks if request.user submitted the Expense, or if request.user has camps.economyteam_permission
    """
    def get_object(self, queryset=None):
        obj = super().get_object(queryset=queryset)
        if obj.user == self.request.user or self.request.user.has_perm('camps.economyteam_permission'):
            return obj
        else:
            # the current user is different from the user who submitted the expense, and current user is not in the economy team; fuckery is afoot, no thanks
            raise Http404()


class RevenuePermissionMixin(object):
    """
    This mixin checks if request.user submitted the Revenue, or if request.user has camps.economyteam_permission
    """
    def get_object(self, queryset=None):
        obj = super().get_object(queryset=queryset)
        if obj.user == self.request.user or self.request.user.has_perm('camps.economyteam_permission'):
            return obj
        else:
            # the current user is different from the user who submitted the revenue, and current user is not in the economy team; fuckery is afoot, no thanks
            raise Http404()


class ReimbursementPermissionMixin(object):
    """
    This mixin checks if request.user owns the Reimbursement, or if request.user has camps.economyteam_permission
    """
    def get_object(self, queryset=None):
        obj = super().get_object(queryset=queryset)
        if obj.reimbursement_user == self.request.user or self.request.user.has_perm('camps.economyteam_permission'):
            return obj
        else:
            # the current user is different from the user who "owns" the reimbursement, and current user is not in the economy team; fuckery is afoot, no thanks
            raise Http404()