zydronium/manage.get.gov
1
0
Fork 0
mirror of https://github.com/cisagov/manage.get.gov.git synced 2025-07-31 23:16:36 +02:00
Code Issues Projects Releases Packages Wiki Activity

Django admin portfolio members section

Browse source
This commit is contained in:
Rachid Mrad 2024-08-21 12:25:27 -04:00
parent eb5623987a
commit eb061be71b
No known key found for this signature in database
6 changed files with 288 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

43
src/registrar/models/user.py
View file

@ -293,6 +293,49 @@ class User(AbstractUser):
def has_edit_suborganization(self):
return self._has_portfolio_permission(UserPortfolioPermissionChoices.EDIT_SUBORGANIZATION)
def has_edit_requests(self):
return self._has_portfolio_permission(UserPortfolioPermissionChoices.EDIT_REQUESTS)
@property
def portfolio_role_summary(self):
"""Returns a list of roles based on the user's permissions."""
roles = []
# Define the conditions and their corresponding roles
conditions_roles = [
(self.has_edit_suborganization(), ["Admin"]),
(
self.has_view_all_domains_permission()
and self.has_domain_requests_portfolio_permission()
and self.has_edit_requests(),
["View-only admin", "Domain requestor"],
),
(
self.has_view_all_domains_permission() and self.has_domain_requests_portfolio_permission(),
["View-only admin"],
),
(
self.has_base_portfolio_permission()
and self.has_edit_requests()
and self.has_domains_portfolio_permission(),
["Member", "Domain requestor", "Domain manager"],
),
(self.has_base_portfolio_permission() and self.has_edit_requests(), ["Member", "Domain requestor"]),
(
self.has_base_portfolio_permission() and self.has_domains_portfolio_permission(),
["Member", "Domain manager"],
),
(self.has_base_portfolio_permission(), ["Member"]),
]
# Evaluate conditions and add roles
for condition, role_list in conditions_roles:
if condition:
roles.extend(role_list)
break
return roles
@classmethod
def needs_identity_verification(cls, email, uuid):
"""A method used by our oidc classes to test whether a user needs email/uuid verification