Misago/misago/threads/permissions/attachments.py

from django.utils.translation import ugettext_lazy as _

from misago.acl import algebra
from misago.acl.models import Role
from misago.core import forms

from ..models import Attachment


"""
Admin Permissions Form
"""
class PermissionsForm(forms.Form):
    legend = _("Attachments")

    max_attachment_size = forms.IntegerField(
        label=_("Max attached file size (in kb)"),
        help_text=_("Enter 0 to disable attachments."),
        initial=500,
        min_value=0
    )

    can_download_other_users_attachments = forms.YesNoSwitch(label=_("Can download other users attachments"))
    can_delete_other_users_attachments = forms.YesNoSwitch(label=_("Can delete other users attachments"))


class AnonymousPermissionsForm(forms.Form):
    legend = _("Attachments")

    can_download_other_users_attachments = forms.YesNoSwitch(label=_("Can download attachments"))


def change_permissions_form(role):
    if isinstance(role, Role):
        if role.special_role != 'anonymous':
            return PermissionsForm
        else:
            return AnonymousPermissionsForm
    else:
        return None


"""
ACL Builder
"""
def build_acl(acl, roles, key_name):
    new_acl = {
        'max_attachment_size': 0,
        'can_download_other_users_attachments': False,
        'can_delete_other_users_attachments': False,
    }
    new_acl.update(acl)

    return algebra.sum_acls(new_acl, roles=roles, key=key_name,
        max_attachment_size=algebra.greater,
        can_download_other_users_attachments=algebra.greater,
        can_delete_other_users_attachments=algebra.greater
    )


"""
ACL's for targets
"""
def add_acl_to_attachment(user, attachment):
    if user.is_authenticated() and user.id == attachment.uploader_id:
        attachment.acl.update({
            'can_download': True,
            'can_delete': True,
        })
    else:
        attachment.acl.update({
            'can_download': user.acl['can_download_other_users_attachments'],
            'can_delete': user.is_authenticated() and user.acl['can_delete_other_users_attachments'],
        })


def register_with(registry):
    registry.acl_annotator(Attachment, add_acl_to_attachment)