import logging import os from functools import wraps from urllib.parse import urlencode from django.contrib import messages from django.http import HttpResponse, HttpResponseRedirect from django.shortcuts import redirect, render from django.urls import reverse from django.utils.translation import gettext as _ from horilla import settings from horilla.settings import BASE_DIR, TEMPLATES logger = logging.getLogger(__name__) TEMPLATES[0]["DIRS"] = [os.path.join(BASE_DIR, "templates")] decorator_with_arguments = ( lambda decorator: lambda *args, **kwargs: lambda func: decorator( func, *args, **kwargs ) ) def check_manager(employee, instance): from employee.models import Employee try: if isinstance(instance, Employee): return instance.employee_work_info.reporting_manager_id == employee return employee == instance.employee_id.employee_work_info.reporting_manager_id except: return False @decorator_with_arguments def permission_required(function, perm): def _function(request, *args, **kwargs): if request.user.has_perm(perm): return function(request, *args, **kwargs) else: messages.info(request, "You dont have permission.") previous_url = request.META.get("HTTP_REFERER", "/") key = "HTTP_HX_REQUEST" if key in request.META.keys(): return render(request, "decorator_404.html") script = f'' return HttpResponse(script) return _function decorator_with_arguments = ( lambda decorator: lambda *args, **kwargs: lambda func: decorator( func, *args, **kwargs ) ) @decorator_with_arguments def delete_permission(function): from employee.models import EmployeeWorkInformation def _function(request, *args, **kwargs): user = request.user employee = user.employee_get is_manager = EmployeeWorkInformation.objects.filter( reporting_manager_id=employee ).exists() if ( request.user.has_perm( kwargs["model"]._meta.app_label + ".delete_" + kwargs["model"]._meta.model_name ) or is_manager ): return function(request, *args, **kwargs) else: messages.info(request, "You dont have permission for delete.") previous_url = request.META.get("HTTP_REFERER", "/") key = "HTTP_HX_REQUEST" if key in request.META.keys(): return render(request, "decorator_404.html") script = f'' return HttpResponse(script) return _function decorator_with_arguments = ( lambda decorator: lambda *args, **kwargs: lambda func: decorator( func, *args, **kwargs ) ) @decorator_with_arguments def duplicate_permission(function): from employee.models import EmployeeWorkInformation def _function(request, *args, **kwargs): user = request.user employee = user.employee_get is_manager = EmployeeWorkInformation.objects.filter( reporting_manager_id=employee ).exists() app_label = kwargs["model"]._meta.app_label model_name = kwargs["model"]._meta.model_name try: obj_id = kwargs["obj_id"] object_instance = kwargs["model"].objects.filter(pk=obj_id).first() if object_instance.employee_id == employee: return function(request, *args, **kwargs) except: pass permission = f"{app_label}.add_{model_name}" if request.user.has_perm(permission) or is_manager: return function(request, *args, **kwargs) else: messages.info(request, "You dont have permission for duplicate action.") previous_url = request.META.get("HTTP_REFERER", "/") key = "HTTP_HX_REQUEST" if key in request.META.keys(): return render(request, "decorator_404.html") script = f'' return HttpResponse(script) return _function decorator_with_arguments = ( lambda decorator: lambda *args, **kwargs: lambda func: decorator( func, *args, **kwargs ) ) @decorator_with_arguments def manager_can_enter(function, perm): from base.models import MultipleApprovalManagers from employee.models import EmployeeWorkInformation """ This method is used to check permission to employee for enter to the function if the employee do not have permission also checks, has reporting manager. """ def _function(request, *args, **kwargs): leave_perm = [ "leave.view_leaverequest", "leave.change_leaverequest", "leave.delete_leaverequest", ] user = request.user employee = user.employee_get if perm in leave_perm: is_approval_manager = MultipleApprovalManagers.objects.filter( employee_id=employee.id ).exists() if is_approval_manager: return function(request, *args, **kwargs) is_manager = EmployeeWorkInformation.objects.filter( reporting_manager_id=employee ).exists() if user.has_perm(perm) or is_manager: return function(request, *args, **kwargs) else: messages.info(request, "You dont have permission.") previous_url = request.META.get("HTTP_REFERER", "/") script = f'' key = "HTTP_HX_REQUEST" if key in request.META.keys(): return render(request, "decorator_404.html") return HttpResponse(script) return _function @decorator_with_arguments def is_recruitment_manager(function, perm): from recruitment.models import Recruitment """ This method is used to check permission to employee for enter to the function if the employee do not have permission also checks, has manager of any recruitment. """ def _function(request, *args, **kwargs): user = request.user perm = "recruitment.view_recruitmentsurvey" is_manager = False recs = Recruitment.objects.all() for i in recs: for manager in i.recruitment_managers.all(): if request.user.employee_get == manager: is_manager = True if user.has_perm(perm) or is_manager: return function(request, *args, **kwargs) else: messages.info(request, "You dont have permission.") previous_url = request.META.get("HTTP_REFERER", "/") script = f'' key = "HTTP_HX_REQUEST" if key in request.META.keys(): return render(request, "decorator_404.html") return HttpResponse(script) return _function def login_required(view_func): def wrapped_view(request, *args, **kwargs): path = request.path res = path.split("/", 2)[1].capitalize().replace("-", " ").upper() if res == "PMS": res = "Performance" request.session["title"] = res if path == "" or path == "/": request.session["title"] = "Dashboard".upper() if not request.user.is_authenticated: login_url = reverse("login") params = urlencode(request.GET) url = f"{login_url}?next={request.path}" if params: url += f"&{params}" return redirect(url) try: func = view_func(request, *args, **kwargs) except Exception as e: logger.error(e) if ( "notifications_notification" in str(e) and request.headers.get("X-Requested-With") != "XMLHttpRequest" ): referer = request.META.get("HTTP_REFERER", "/") messages.warning(request, str(e)) return HttpResponse( f"" ) if not settings.DEBUG: return render(request, "went_wrong.html") return view_func(request, *args, **kwargs) return func return wrapped_view def hx_request_required(view_func): def wrapped_view(request, *args, **kwargs): key = "HTTP_HX_REQUEST" if key not in request.META.keys(): return render(request, "405.html") return view_func(request, *args, **kwargs) return wrapped_view @decorator_with_arguments def owner_can_enter(function, perm: str, model: object, manager_access=False): from employee.models import Employee, EmployeeWorkInformation """ Only the users with permission, or the owner, or employees manager can enter, If manager_access:True then all the managers can enter """ def _function(request, *args, **kwargs): instance_id = kwargs[list(kwargs.keys())[0]] if model == Employee: employee = Employee.objects.filter(id=instance_id).first() else: try: employee = ( model.objects.filter(id=instance_id).first().employee_id if model.objects.filter(id=instance_id).first() else None ) except: messages.error(request, ("Sorry, something went wrong!")) return HttpResponseRedirect(request.META.get("HTTP_REFERER", "/")) can_enter = ( request.user.employee_get == employee or request.user.has_perm(perm) or check_manager(request.user.employee_get, employee) or ( EmployeeWorkInformation.objects.filter( reporting_manager_id__employee_user_id=request.user ).exists() if manager_access else False ) ) if can_enter or not employee: return function(request, *args, **kwargs) return render(request, "no_perm.html") return _function def install_required(function): from base.models import BiometricAttendance, TrackLateComeEarlyOut def _function(request, *args, **kwargs): if request.path_info.endswith("late-come-early-out-view/"): object, created = TrackLateComeEarlyOut.objects.get_or_create() if not object or object.is_enable: return function(request, *args, **kwargs) else: messages.info( request, _("Please enable the Track Late Come & Early Out from settings"), ) return HttpResponseRedirect(request.META.get("HTTP_REFERER", "/")) object = BiometricAttendance.objects.all().first() if not object or object.is_installed: return function(request, *args, **kwargs) else: messages.info( request, _( "Please activate the biometric attendance feature in the settings menu." ), ) return HttpResponseRedirect(request.META.get("HTTP_REFERER", "/")) return _function @decorator_with_arguments def meeting_manager_can_enter(function, perm, answerable=False): from employee.models import Employee def _function(request, *args, **kwargs): user = request.user employee = user.employee_get is_answer_employee = False is_manager = ( Employee.objects.filter( meeting_manager__isnull=False, ) .filter(id=employee.id) .exists() ) if answerable: is_answer_employee = ( Employee.objects.filter( meeting_answer_employees__isnull=False, ) .filter(id=employee.id) .exists() ) if user.has_perm(perm) or is_manager or is_answer_employee: return function(request, *args, **kwargs) else: messages.info(request, "You dont have permission.") previous_url = request.META.get("HTTP_REFERER", "/") script = f'' key = "HTTP_HX_REQUEST" if key in request.META.keys(): return render(request, "decorator_404.html") return HttpResponse(script) return _function DECORATOR_MAP = { "login_required": login_required, "permission_required": permission_required, "delete_permission": delete_permission, "duplicate_permission": duplicate_permission, "manager_can_enter": manager_can_enter, "is_recruitment_manager": is_recruitment_manager, "hx_request_required": hx_request_required, "owner_can_enter": owner_can_enter, "install_required": install_required, "meeting_manager_can_enter": meeting_manager_can_enter, } def get_decorator(decorator_string, args=None): decorator = DECORATOR_MAP.get(decorator_string) if decorator: if args is not None: if isinstance(args, (list, tuple)): return decorator(*args) else: return decorator(args) else: return decorator return None def apply_decorators(decorators): def decorator(func): @wraps(func) def wrapper(*args, **kwargs): decorated_func = func for decorator_item in decorators: if isinstance(decorator_item, str): decorator = get_decorator(decorator_item) elif ( isinstance(decorator_item, (list, tuple)) and len(decorator_item) == 2 ): decorator_string, decorator_args = decorator_item decorator = get_decorator(decorator_string, decorator_args) else: print(f"Warning: Invalid decorator format: {decorator_item}") continue if decorator: if callable(decorator): decorated_func = decorator(decorated_func) else: # For decorators returned by decorator_with_arguments decorated_func = decorator(decorated_func) else: print(f"Warning: Decorator '{decorator_item}' not found or invalid") return decorated_func(*args, **kwargs) return wrapper return decorator