mirror of
https://github.com/QingdaoU/OnlineJudge.git
synced 2024-12-29 16:41:56 +00:00
111 lines
4.0 KiB
Python
111 lines
4.0 KiB
Python
import functools
|
||
|
||
from utils.api import JSONResponse
|
||
|
||
from .models import ProblemPermission
|
||
|
||
from contest.models import Contest, ContestType, ContestStatus, ContestRuleType
|
||
|
||
|
||
class BasePermissionDecorator(object):
|
||
def __init__(self, func):
|
||
self.func = func
|
||
|
||
def __get__(self, obj, obj_type):
|
||
return functools.partial(self.__call__, obj)
|
||
|
||
def error(self, data):
|
||
return JSONResponse.response({"error": "permission-denied", "data": data})
|
||
|
||
def __call__(self, *args, **kwargs):
|
||
self.request = args[1]
|
||
|
||
if self.check_permission():
|
||
if self.request.user.is_disabled:
|
||
return self.error("Your account is disabled")
|
||
return self.func(*args, **kwargs)
|
||
else:
|
||
return self.error("Please login first")
|
||
|
||
def check_permission(self):
|
||
raise NotImplementedError()
|
||
|
||
|
||
class login_required(BasePermissionDecorator):
|
||
def check_permission(self):
|
||
return self.request.user.is_authenticated()
|
||
|
||
|
||
class super_admin_required(BasePermissionDecorator):
|
||
def check_permission(self):
|
||
user = self.request.user
|
||
return user.is_authenticated() and user.is_super_admin()
|
||
|
||
|
||
class admin_role_required(BasePermissionDecorator):
|
||
def check_permission(self):
|
||
user = self.request.user
|
||
return user.is_authenticated() and user.is_admin_role()
|
||
|
||
|
||
class problem_permission_required(admin_role_required):
|
||
def check_permission(self):
|
||
if not super(problem_permission_required, self).check_permission():
|
||
return False
|
||
if self.request.user.problem_permission == ProblemPermission.NONE:
|
||
return False
|
||
return True
|
||
|
||
|
||
def check_contest_permission(check_type="details"):
|
||
"""
|
||
只供Class based view 使用，检查用户是否有权进入该contest, check_type 可选 details, problems, ranks, submissions
|
||
若通过验证，在view中可通过self.contest获得该contest
|
||
"""
|
||
|
||
def decorator(func):
|
||
def _check_permission(*args, **kwargs):
|
||
self = args[0]
|
||
request = args[1]
|
||
user = request.user
|
||
if request.data.get("contest_id"):
|
||
contest_id = request.data["contest_id"]
|
||
else:
|
||
contest_id = request.GET.get("contest_id")
|
||
if not contest_id:
|
||
return self.error("Parameter error, contest_id is required")
|
||
|
||
try:
|
||
# use self.contest to avoid query contest again in view.
|
||
self.contest = Contest.objects.select_related("created_by").get(id=contest_id, visible=True)
|
||
except Contest.DoesNotExist:
|
||
return self.error("Contest %s doesn't exist" % contest_id)
|
||
|
||
# creator or owner
|
||
if user.is_authenticated() and user.is_contest_admin(self.contest):
|
||
return func(*args, **kwargs)
|
||
|
||
if self.contest.contest_type == ContestType.PASSWORD_PROTECTED_CONTEST:
|
||
# Anonymous
|
||
if not user.is_authenticated():
|
||
return self.error("Please login first.")
|
||
# password error
|
||
if ("accessible_contests" not in request.session) or \
|
||
(self.contest.id not in request.session["accessible_contests"]):
|
||
return self.error("Password is required.")
|
||
|
||
# regular user get contest problems, ranks etc. before contest started
|
||
if self.contest.status == ContestStatus.CONTEST_NOT_START and check_type != "details":
|
||
return self.error("Contest has not started yet.")
|
||
|
||
# check does user have permission to get ranks, submissions in OI Contest
|
||
if self.contest.status == ContestStatus.CONTEST_UNDERWAY and self.contest.rule_type == ContestRuleType.OI:
|
||
if not self.contest.real_time_rank and (check_type == "ranks" or check_type == "submissions"):
|
||
return self.error(f"No permission to get {check_type}")
|
||
|
||
return func(*args, **kwargs)
|
||
|
||
return _check_permission
|
||
|
||
return decorator
|