zydronium/manage.get.gov
1
0
Fork 0
mirror of https://github.com/cisagov/manage.get.gov.git synced 2025-08-28 12:03:53 +02:00
Code Issues Projects Releases Packages Wiki Activity

Clamp to perms

Browse source
This commit is contained in:
zandercymatics 2024-07-30 14:39:50 -06:00
parent 6637c0f9b1
commit 511f545f26
No known key found for this signature in database
GPG key ID: FF4636ABEC9682B7
2 changed files with 14 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/registrar/models/user.py
View file

@ -301,6 +301,11 @@ class User(AbstractUser):
or self._has_portfolio_permission(User.UserPortfolioPermissionChoices.VIEW_CREATED_REQUESTS)
# or self._has_portfolio_permission(User.UserPortfolioPermissionChoices.EDIT_REQUESTS)
)
def has_view_all_domains_permission(self):
"""Determines if the current user can view all available domains in a given portfolio"""
return self._has_portfolio_permission(User.UserPortfolioPermissionChoices.VIEW_ALL_DOMAINS)
@classmethod
def needs_identity_verification(cls, email, uuid):

11
src/registrar/utility/csv_export.py
View file

@ -578,8 +578,15 @@ class DomainDataTypeUser(DomainDataType):
# Return nothing
return Q(id__in=[])
user_domain_roles = UserDomainRole.objects.filter(user=request.user)
domain_ids = user_domain_roles.values_list("domain_id", flat=True)
if (
request.user.has_base_portfolio_permission() and
request.user.has_view_all_domains_permission()
):
models = DomainInformation.objects.filter(portfolio=request.user.portfolio)
else:
models = UserDomainRole.objects.filter(user=request.user)
domain_ids = models.values_list("domain_id", flat=True)
return Q(domain__id__in=domain_ids)