rsw/score
1
0
Fork 0
Code Issues 2 Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Implement teams in own file

Browse Source
This commit is contained in:
Sebastiaan
2025-06-09 15:42:44 +02:00
parent 5aab2add76
commit 7387dd7b40
11 changed files with 630 additions and 245 deletions
Download Patch File Download Diff File Expand all files Collapse all files

179
backend/app/api/routes/events.py
View File

@@ -16,10 +16,6 @@ from app.models.event import (
EventsPublic,
EventUpdate,
EventUserLink,
EventTeam,
EventTeamCreate,
EventTeamPublic,
EventTeamsPublic,
)
from app.models.user import (
PermissionModule,
@@ -88,8 +84,9 @@ def read_event(session: SessionDep, current_user: CurrentUser, id: RowId) -> Any
module=PermissionModule.EVENT,
part=PermissionPart.ADMIN,
rights=PermissionRight.READ,
) and (event.user_has_rights(user=current_user, rights=PermissionRight.READ)):
) and not (event.user_has_rights(user=current_user, rights=PermissionRight.READ)):
raise HTTPException(status_code=400, detail="Not enough permissions")
return event
@@ -131,7 +128,7 @@ def update_event(
module=PermissionModule.EVENT,
part=PermissionPart.ADMIN,
rights=PermissionRight.UPDATE,
) and (event.user_has_rights(user=current_user, rights=PermissionRight.UPDATE)):
) and not (event.user_has_rights(user=current_user, rights=PermissionRight.UPDATE)):
raise HTTPException(status_code=400, detail="Not enough permissions")
return Event.update(db_obj=event, in_obj=event_in, session=session)
@@ -154,7 +151,7 @@ def delete_event(
module=PermissionModule.EVENT,
part=PermissionPart.ADMIN,
rights=PermissionRight.DELETE,
) and (event.user_has_rights(user=current_user, rights=PermissionRight.DELETE)):
) and not (event.user_has_rights(user=current_user, rights=PermissionRight.DELETE)):
raise HTTPException(status_code=400, detail="Not enough permissions")
session.delete(event)
@@ -187,7 +184,7 @@ def add_user_to_event(
module=PermissionModule.EVENT,
part=PermissionPart.ADMIN,
rights=PermissionRight.MANAGE_USERS,
) and (
) and not (
event.user_has_rights(
user=current_user, rights=(PermissionRight.MANAGE_USERS | rights_in.rights)
)
@@ -219,9 +216,7 @@ def remove_user_from_event(
module=PermissionModule.EVENT,
part=PermissionPart.ADMIN,
rights=PermissionRight.MANAGE_USERS,
) and not event.user_has_rights(
user=current_user, rights=PermissionRight.MANAGE_USERS
):
) and not event.user_has_rights(user=current_user, rights=PermissionRight.MANAGE_USERS):
raise HTTPException(status_code=403, detail="Not enough permissions")
user = session.get(User, user_id)
@@ -235,165 +230,3 @@ def remove_user_from_event(
# endregion
# region # Event / Teams #######################################################
@router.get("/{id}/teams", response_model=EventTeamsPublic, tags=router.tags + [ApiTags.TEAMS])
def read_event_teams(
session: SessionDep, current_user: CurrentUser, id: RowId, skip: int = 0, limit: int = 100
) -> Any:
"""
Retrieve event teams from a single event.
"""
# Event permissions
event = session.get(Event, id)
if not event:
raise HTTPException(status_code=404, detail="Event not found")
if not current_user.has_permission(
module=PermissionModule.EVENT,
part=PermissionPart.ADMIN,
rights=(PermissionRight.READ | PermissionRight.MANGE_TEAMS),
) and ( event and (event.user_has_right(user=current_user, rights=(PermissionRight.READ | PermissionRight.MANGE_TEAMS)))):
raise HTTPException(status_code=400, detail="Not enough permissions")
# Get list
count_statement = (
select(func.count())
.select_from(EventTeam)
.where(EventTeam.event_id == id)
)
count = session.exec(count_statement).one()
statement = (
select(EventTeam)
.where(EventTeam.event_id == id)
.offset(skip)
.limit(limit)
)
event_teams = session.exec(statement).all()
return EventTeamsPublic(data=event_teams, count=count)
@router.post("/{id}/teams", response_model=EventTeamPublic, tags=router.tags + [ApiTags.TEAMS])
def create_event_team(
*, session: SessionDep, current_user: CurrentUser, id: RowId, event_team_in: EventTeamCreate
) -> Any:
"""
Create new team inside event.
"""
event = session.get(Event, id)
if not current_user.has_permissions(
module=PermissionModule.EVENT,
part=PermissionPart.ADMIN,
rights=PermissionRight.MANGE_TEAMS,
) and ( event and (event.user_has_rights(user=current_user, rights=PermissionRight.MANGE_TEAMS))):
raise HTTPException(status_code=400, detail="Not enough permissions")
event_team = EventTeam.create(create_obj=event_team_in, event=event, session=session)
return event_team
@router.get("-teams", response_model=EventTeamsPublic, tags=router.tags + [ApiTags.TEAMS])
def read_all_event_teams(
session: SessionDep, current_user: CurrentUser, skip: int = 0, limit: int = 100
) -> Any:
"""
Retrieve all event teams.
"""
if not current_user.has_permissions(
module=PermissionModule.EVENT,
part=PermissionPart.ADMIN,
rights=PermissionRight.MANGE_TEAMS,
):
raise HTTPException(status_code=400, detail="Not enough permissions")
# Get list
count_statement = (
select(func.count())
.select_from(EventTeam)
)
count = session.exec(count_statement).one()
statement = (
select(EventTeam)
.offset(skip)
.limit(limit)
)
event_teams = session.exec(statement).all()
return EventTeamsPublic(data=event_teams, count=count)
@router.get("-teams/{id}", response_model=EventTeamPublic, tags=router.tags + [ApiTags.TEAMS])
def read_event_team(session: SessionDep, current_user: CurrentUser, id: RowId) -> Any:
"""
Get event team by ID.
"""
event_team = session.get(EventTeam, id)
if not event_team:
raise HTTPException(status_code=404, detail="Event team not found")
event = session.get(Event, event_team.event_id)
if not current_user.has_permissions(
module=PermissionModule.EVENT,
part=PermissionPart.ADMIN,
rights=PermissionRight.MANGE_TEAMS,
) and ( event and (event.user_has_rights(user=current_user, rights=PermissionRight.MANGE_TEAMS))):
raise HTTPException(status_code=400, detail="Not enough permissions")
return event_team
@router.put("-teams/{id}", response_model=EventTeamPublic, tags=router.tags + [ApiTags.TEAMS])
def create_event_team(
*, session: SessionDep, current_user: CurrentUser, id: RowId, event_team_in: EventTeamCreate
) -> Any:
"""
Update team.
"""
event_team = session.get(EventTeam, id)
if not event_team:
raise HTTPException(status_code=404, detail="Event team not found")
event = session.get(Event, event_team.event_id)
if not current_user.has_permissions(
module=PermissionModule.EVENT,
part=PermissionPart.ADMIN,
rights=PermissionRight.MANGE_TEAMS,
) and ( event and (event.user_has_rights(user=current_user, rights=PermissionRight.MANGE_TEAMS))):
raise HTTPException(status_code=400, detail="Not enough permissions")
event_team = EventTeam.update(db_obj=event_team, in_obj=event_team_in, session=session)
return event_team
@router.delete("-teams/{id}", tags=router.tags + [ApiTags.TEAMS])
def delete_event_team(session: SessionDep,current_user: CurrentUser, id: RowId) -> Message:
"""
Delete an event team.
"""
event_team = session.get(EventTeam, id)
if not event_team:
raise HTTPException(status_code=404, detail="Event team not found")
event = session.get(Event, event_team.event_id)
if not current_user.has_permissions(
module=PermissionModule.EVENT,
part=PermissionPart.ADMIN,
rights=PermissionRight.MANGE_TEAMS,
) and (event.user_has_rights(user=current_user, rights=PermissionRight.MANGE_TEAMS)):
raise HTTPException(status_code=400, detail="Not enough permissions")
session.delete(event_team)
session.commit()
return Message(message="Event team deleted successfully")
# endregion