update
This commit is contained in:
@@ -11,7 +11,7 @@ from rest_framework.response import Response
|
||||
from rest_framework.views import APIView
|
||||
from rest_framework.viewsets import ModelViewSet
|
||||
|
||||
from core.apps.accounts.choices import RoleChoice
|
||||
from core.apps.accounts.permissions import IsAdminRole
|
||||
from core.apps.accounts.serializers.user import UserSerializer
|
||||
from core.apps.evaluation.filters.auto import AutoevaluationFilter
|
||||
from core.apps.evaluation.models import AutoEvaluationModel
|
||||
@@ -177,13 +177,14 @@ class AutoEvaluationArchiveAPIView(APIView):
|
||||
status=200
|
||||
)
|
||||
|
||||
|
||||
@extend_schema(tags=["AutoEvaluation"])
|
||||
class AdminEvaluationsAPIView(generics.GenericAPIView):
|
||||
permission_classes = [IsAuthenticated]
|
||||
permission_classes = [IsAuthenticated, IsAdminRole]
|
||||
queryset = AutoEvaluationModel.objects.all()
|
||||
serializer_class = AutoEvaluationModel
|
||||
|
||||
def get(self, request):
|
||||
if request.user.role != RoleChoice.ADMIN:
|
||||
return Response({'detail': 'Forbidden'}, status=403)
|
||||
auto_eval = AutoEvaluationModel.objects.filter(
|
||||
created_by=self.request.user
|
||||
).select_related('appraisers').distinct()
|
||||
|
||||
@@ -16,7 +16,7 @@ from rest_framework.response import Response
|
||||
from rest_framework.views import APIView
|
||||
from rest_framework.viewsets import ModelViewSet
|
||||
|
||||
from core.apps.accounts.choices import RoleChoice
|
||||
from core.apps.accounts.permissions import IsAdminRole
|
||||
# core apps
|
||||
from core.apps.evaluation.filters.quick import QuickevaluationFilter
|
||||
from core.apps.evaluation.models import QuickEvaluationModel
|
||||
@@ -88,11 +88,11 @@ class QuickEvaluationArchivedListAPIView(ListAPIView):
|
||||
|
||||
@extend_schema(tags=["QuickEvaluation"])
|
||||
class AdminQuickEvalAPIView(generics.GenericAPIView):
|
||||
permission_classes = [IsAuthenticated]
|
||||
permission_classes = [IsAuthenticated, IsAdminRole]
|
||||
queryset = QuickEvaluationModel.objects.all()
|
||||
serializer_class = QuickEvaluationModelSerializer
|
||||
|
||||
def get(self, request):
|
||||
if request.user.role != RoleChoice.ADMIN:
|
||||
return Response({'detail': 'Forbidden'}, status=403)
|
||||
quick_eval = QuickEvaluationModel.objects.filter(
|
||||
created_by=self.request.user
|
||||
).select_related('created_by').distinct()
|
||||
|
||||
Reference in New Issue
Block a user