add order apis

core/apps/orders/views/order.py

@@ -1,8 +1,13 @@
-from rest_framework import generics, status
+from django.shortcuts import get_object_or_404
+
+from rest_framework import generics, status, views, filters
 from rest_framework.response import Response
 
+from django_filters.rest_framework import DjangoFilterBackend
+
 from core.apps.orders.serializers import order as serializers
 from core.apps.orders.models import Order
+from core.apps.orders.filters.order import OrderFilter
 from core.apps.accounts.permissions.permissions import HasRolePermission
 from core.apps.shared.paginations.custom import CustomPageNumberPagination
 
@@ -13,19 +18,43 @@ class OrderListApiView(generics.ListAPIView):
         'product', 'unity', 'project', 'project_folder', 'wherehouse'
     )
     permission_classes = [HasRolePermission]
-    required_permissions = []
+    required_permissions = ['order']
     pagination_class = CustomPageNumberPagination
-
+    filter_backends = [DjangoFilterBackend, filters.SearchFilter]
+    search_fields = [
+        'product__name', 'unity__value', 'project_folder__name', 'project__name',
+        'wherehouse__name', 'date', 'quantity', 'employee__full_name', 'employee__phone_number'
+    ]
+    filterset_class = [OrderFilter]
 
 
 class OrderCreateApiView(generics.CreateAPIView):
     serializer_class = serializers.OrderCreateSerializer
     queryset = Order.objects.all()
     permission_classes = [HasRolePermission]
-    required_permissions = []
+    required_permissions = ['order']
 
     def get_serializer_context(self):
         context = super().get_serializer_context()
         context['user'] = self.request.user
         return context
-    
+    
+
+class OrderUpdateApiView(generics.UpdateAPIView):
+    serializer_class = serializers.OrderUpdateSerializer
+    queryset = Order.objects.all()
+    permission_classes = [HasRolePermission]
+    required_permissions = ['order']
+    lookup_field = 'id'
+
+
+class OrderDeleteApiView(views.APIView):
+    permission_classes = [HasRolePermission]
+    required_permissions = ['order']
+
+    def delete(self, request, id):
+        order = get_object_or_404(Order, id=id)
+        order.delete()
+        return Response({"success": True, "message": "Deleted!"}, status=204)
+
+