add: BaseApiViewMixin created, TODO: switch external endpoints to GenericAPIView and BaseApiViewMixin

core/apps/companies/views/folders.py

@@ -1,10 +1,12 @@
 from typing import cast
 
 from django_core.mixins import BaseViewSetMixin  # type: ignore
+from django.db import transaction
 from drf_spectacular.utils import extend_schema
 from rest_framework.decorators import action  # type: ignore
 from rest_framework.permissions import AllowAny, IsAdminUser  # type: ignore
-from rest_framework.viewsets import ModelViewSet  # type: ignore
+from rest_framework.viewsets import ModelViewSet, GenericViewSet  # type: ignore
+from rest_framework.generics import GenericAPIView  # type: ignore
 from rest_framework.request import HttpRequest  # type: ignore
 from rest_framework.response import Response  # type: ignore
 from rest_framework import status  # type: ignore
@@ -21,10 +23,12 @@ from core.apps.companies.serializers.folders import (
 )
 
 
+######################################################################
+# Crud
+######################################################################
 @extend_schema(tags=["CompanyFolder"])
-class CompanyFolderView(BaseViewSetMixin, ModelViewSet):
+class CompanyFolderCrudViewSet(BaseViewSetMixin, ModelViewSet):
     queryset = CompanyFolderModel.objects.all()
-    serializer_class = ListCompanyFolderSerializer
     permission_classes = [AllowAny]
 
     action_permission_classes = {  # type: ignore
@@ -33,7 +37,6 @@ class CompanyFolderView(BaseViewSetMixin, ModelViewSet):
         "create": [IsAdminUser],
         "update": [IsAdminUser],
         "destroy": [IsAdminUser],
-        "create_contract": [IsFolderOwner]
     }
     action_serializer_class = {  # type: ignore
         "list": ListCompanyFolderSerializer,
@@ -41,24 +44,33 @@ class CompanyFolderView(BaseViewSetMixin, ModelViewSet):
         "create": CreateCompanyFolderSerializer,
         "update": UpdateCompanyFolderSerializer,
         "destroy": DestroyCompanyFolderSerializer,
-        "create_contract": CreateContractSerializer,
     }
 
+
+######################################################################
+# /contract-folders/<uuid:pk>/contracts
+######################################################################
+class ContractFolderApiView(GenericAPIView):
+    queryset = CompanyFolderModel.objects.all()
+    permission_classes = [AllowAny]
+    serializer_class = None
+
+    def get_serializer_class(self):  # type: ignore
+        if self.request.method == "POST":
+            return CreateContractSerializer
+        return self.serializer_class
+
     @extend_schema(
         summary="Create Contract For Folder",
         description="Create Contract For Folder",
     )
     @action(methods=["POST"], detail=True, url_path="contracts")
-    def create_contract(
-        self,
-        request: HttpRequest,
-        *args: object,
-        **kwargs: object
-    ) -> Response:
-        ser = cast(
-            CreateContractSerializer, 
-            self.get_serializer(data=request.data)  # type: ignore
-        )
-        ser.is_valid(raise_exception=True)
-        ser.save()
+    def create_contract(self, request: HttpRequest, *args: object, **kwargs: object) -> Response:
+        with transaction.atomic():
+            folder = cast(CompanyFolderModel, self.get_object())
+            ser = cast(CreateContractSerializer, self.get_serializer(data=request.data))  # type: ignore
+            ser.is_valid(raise_exception=True)
+            contract = ser.save()
+            folder.contracts.add(contract)
         return Response(ser.data, status.HTTP_201_CREATED)
+