django-whiteneuron 0.2.42__tar.gz → 0.2.47__tar.gz

{django_whiteneuron-0.2.42 → django_whiteneuron-0.2.47}/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: django-whiteneuron
-Version: 0.2.42
+Version: 0.2.47
 Summary: A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold.
-Author-email: White Neuron <anhnt@whiteneuron.com>
+Author-email: White Neuron <anhnt@whiteneuron.ai>
 License: MIT License
         
         Copyright (c) 2025 Nguyễn Tú Anh
@@ -25,7 +25,7 @@ License: MIT License
         OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
         SOFTWARE.
         
-Project-URL: homepage, https://github.com/White-Neuron/django-whiteneuron
+Project-URL: homepage, https://whiteneuron.ai
 Project-URL: repository, https://github.com/White-Neuron/django-whiteneuron
 Project-URL: changelog, https://github.com/White-Neuron/django-whiteneuron/releases
 Project-URL: Bug Tracker, https://github.com/White-Neuron/django-whiteneuron/issues
@@ -34,7 +34,7 @@ Keywords: django,plugin,admin,dashboard,whiteneuron
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: Framework :: Django
-Classifier: Framework :: Django :: 5.0
+Classifier: Framework :: Django :: 5.2
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
@@ -44,7 +44,7 @@ Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: django-debug-toolbar>=5.0.1
-Requires-Dist: django>=5.1.6
+Requires-Dist: django>=5.2.12
 Requires-Dist: django-celery-beat>=2.7.0
 Requires-Dist: django-guardian>=2.4.0
 Requires-Dist: django-imagekit>=5.0.0
@@ -58,7 +58,7 @@ Requires-Dist: markdown>=3.7
 Requires-Dist: openai>=1.58.1
 Requires-Dist: openpyxl>=3.1.5
 Requires-Dist: pandas>=2.2.3
-Requires-Dist: pillow>=11.0.0
+Requires-Dist: pillow>=12.1.1
 Requires-Dist: python-dotenv>=1.0.1
 Requires-Dist: redis>=5.2.1
 Requires-Dist: sentry-sdk==2.28.0
@@ -74,6 +74,7 @@ Requires-Dist: django-ckeditor-5>=0.2.18
 Requires-Dist: django-cors-headers>=4.3.0
 Requires-Dist: django-unfold>=0.85.0
 Requires-Dist: djangoql>=0.18.1
+Requires-Dist: cryptography>=46.0.5
 Provides-Extra: dev
 Requires-Dist: pytest; extra == "dev"
 Requires-Dist: black; extra == "dev"
@@ -94,18 +95,50 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Current Version
 
-- 0.2.42
+- 0.2.45
 
 ## Compatibility
 
 - Python >= 3.11
-- Django >= 5.1.6
+- Django >= 5.2.12
 - django-unfold >= 0.85.0
 - Tailwind CSS 4.x + daisyUI 5.x (for the bundled frontend styles)
 
 ## Changelog
 
-### v0.2.42 (2026-03-31) — latest
+### v0.2.45 (2026-04-03) — latest
+**Security: 11 CVE fixes across django, pillow, cryptography, pyasn1**
+- **Security**: `django` lower bound raised from `>=5.1.6` to `>=5.2.12` — patches 7 CVEs including SQL Injection (CVE-2026-1207), DoS ×5, race condition in file-system storage (CVE-2026-25674), and URLField vulnerability (CVE-2026-25673).
+- **Security**: `pillow` lower bound raised from `>=11.0.0` to `>=12.1.1` — patches heap buffer overflow (CVE-2026-25990).
+- **Security**: `cryptography>=46.0.5` added as explicit dependency — patches Improper Input Validation (CVE-2026-26007); previously uncontrolled transitive dependency.
+- **Security**: `pyasn1>=0.6.2` added as explicit dependency — patches CVE-2026-23490; `==0.6.1` was the sole affected version.
+- **Validation**: `safety` scan confirms 0 known vulnerabilities after upgrade (down from 11).
+
+### v0.2.44 (2026-04-02)
+**Fixes & Improvements: Feedback System — Error handling, input limits, i18n lazy evaluation**
+- **Fixed**: `changeform_view` now returns `JsonResponse({"success": True})` after a successful resolve instead of falling through to `super()` with a POST request — prevents a spurious HTTP 403 caused by `has_change_permission = False`.
+- **Fixed**: `note` is read from `request.POST` instead of `request.GET` — prevents HTTP 414 (URI Too Long) when the note is lengthy.
+- **Fixed**: JS `fetch` upgraded to POST + `FormData` with CSRF token; error handling now maps status codes (403/404/500/network) to specific user-facing messages.
+- **Added**: Two-sided character limits — `maxlength` attribute + live counter on client; server-side validation: `note ≤ 500`, `feedback_message ≤ 2000`.
+- **Added**: `get_short_message()` in `FeedbackDataAdmin.list_display` — truncates to 200 words via Django's `Truncator`.
+- **Fixed**: `search_help_text` moved from `__init__` to a `@property` using `format_lazy` — now re-evaluates per request and responds correctly to language switches instead of being frozen at server startup.
+- **Improved**: `base_badge_callback()` accepts an optional `filter_kwargs` parameter; `feedback_data_badge_callback()` now scopes the badge count to the current user for non-superusers.
+
+### v0.2.43 (2026-04-01)
+**Feature: Feedback System — DaisyUI modals, anti-spam cooldown, i18n, security hardening**
+- **Added**: DaisyUI `<dialog>` modals replace native `prompt()`/`alert()` in both `feedback_change_form.html` (Mark as Resolved flow) and `submit_line.html` (Feedback submission) — smooth animations, no browser dialogs.
+- **Added**: Server-side anti-spam cooldown — 60s per user globally; HTTP 429 with dynamically calculated remaining seconds (`remaining = 60 - elapsed`).
+- **Security**: Replaced `@csrf_exempt` with `@require_POST` in feedback endpoint — CSRF protection fully enforced via `X-CSRFToken` header.
+- **Security**: Auth check moved before body parse; removed redundant `User.objects.get()` in favor of `request.user`.
+- **Fixed**: `FeedbackDataAdmin.changeform_view()` — null guard added after `get_object()` to prevent `AttributeError` when object does not exist.
+- **Fixed**: OK button in result modal now wrapped in `<form method="dialog">` — dialog closes correctly, `close` event fires `location.reload()`.
+- **Fixed**: Buttons missing `type="button"` were inadvertently submitting the admin form — fixed across all modals.
+- **Fixed**: Modals moved to `document.body` via JS — eliminates content flash at page bottom during closing animation.
+- **Fixed**: Import cleanup in `feedbacks/admin.py` — removed unused `display` import, moved `FEEDBACK_COOLDOWN_SECONDS` import to top.
+- **Added**: Full i18n (`{% trans %}`, `{% blocktrans %}`, `gettext_lazy`) across feedback templates and `modeladmin.py` (12 strings); Vietnamese translations updated in `locale/vi`.
+- **Added**: `feedback_cooldown_ms` passed from server via `FeedbackBaseAdmin.render_change_form()` — no more hardcoded 60000ms in template.
+
+### v0.2.42 (2026-03-31)
 **Improve: persist filter/search state in admin changelist + fix Django duplicate filter bug**
 - **Added**: Filter/search state is now persisted via `sessionStorage` across navigation — selecting a filter, navigating to a detail page, then returning restores the exact filter state automatically.
 - **Fixed**: Django bug — `add_preserved_filters()` uses `dict(parse_qsl())` which drops duplicate filter params (e.g. `?chapter__id__exact=29&chapter__id__exact=31` → only `=31` kept after save). Fixed server-side in `ModelAdmin._fix_preserved_filters()` — rebuilds the redirect URL with `parse_qsl()` (preserves all values) when duplicates are detected.

{django_whiteneuron-0.2.42 → django_whiteneuron-0.2.47}/README.md

@@ -11,18 +11,50 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Current Version
 
-- 0.2.42
+- 0.2.45
 
 ## Compatibility
 
 - Python >= 3.11
-- Django >= 5.1.6
+- Django >= 5.2.12
 - django-unfold >= 0.85.0
 - Tailwind CSS 4.x + daisyUI 5.x (for the bundled frontend styles)
 
 ## Changelog
 
-### v0.2.42 (2026-03-31) — latest
+### v0.2.45 (2026-04-03) — latest
+**Security: 11 CVE fixes across django, pillow, cryptography, pyasn1**
+- **Security**: `django` lower bound raised from `>=5.1.6` to `>=5.2.12` — patches 7 CVEs including SQL Injection (CVE-2026-1207), DoS ×5, race condition in file-system storage (CVE-2026-25674), and URLField vulnerability (CVE-2026-25673).
+- **Security**: `pillow` lower bound raised from `>=11.0.0` to `>=12.1.1` — patches heap buffer overflow (CVE-2026-25990).
+- **Security**: `cryptography>=46.0.5` added as explicit dependency — patches Improper Input Validation (CVE-2026-26007); previously uncontrolled transitive dependency.
+- **Security**: `pyasn1>=0.6.2` added as explicit dependency — patches CVE-2026-23490; `==0.6.1` was the sole affected version.
+- **Validation**: `safety` scan confirms 0 known vulnerabilities after upgrade (down from 11).
+
+### v0.2.44 (2026-04-02)
+**Fixes & Improvements: Feedback System — Error handling, input limits, i18n lazy evaluation**
+- **Fixed**: `changeform_view` now returns `JsonResponse({"success": True})` after a successful resolve instead of falling through to `super()` with a POST request — prevents a spurious HTTP 403 caused by `has_change_permission = False`.
+- **Fixed**: `note` is read from `request.POST` instead of `request.GET` — prevents HTTP 414 (URI Too Long) when the note is lengthy.
+- **Fixed**: JS `fetch` upgraded to POST + `FormData` with CSRF token; error handling now maps status codes (403/404/500/network) to specific user-facing messages.
+- **Added**: Two-sided character limits — `maxlength` attribute + live counter on client; server-side validation: `note ≤ 500`, `feedback_message ≤ 2000`.
+- **Added**: `get_short_message()` in `FeedbackDataAdmin.list_display` — truncates to 200 words via Django's `Truncator`.
+- **Fixed**: `search_help_text` moved from `__init__` to a `@property` using `format_lazy` — now re-evaluates per request and responds correctly to language switches instead of being frozen at server startup.
+- **Improved**: `base_badge_callback()` accepts an optional `filter_kwargs` parameter; `feedback_data_badge_callback()` now scopes the badge count to the current user for non-superusers.
+
+### v0.2.43 (2026-04-01)
+**Feature: Feedback System — DaisyUI modals, anti-spam cooldown, i18n, security hardening**
+- **Added**: DaisyUI `<dialog>` modals replace native `prompt()`/`alert()` in both `feedback_change_form.html` (Mark as Resolved flow) and `submit_line.html` (Feedback submission) — smooth animations, no browser dialogs.
+- **Added**: Server-side anti-spam cooldown — 60s per user globally; HTTP 429 with dynamically calculated remaining seconds (`remaining = 60 - elapsed`).
+- **Security**: Replaced `@csrf_exempt` with `@require_POST` in feedback endpoint — CSRF protection fully enforced via `X-CSRFToken` header.
+- **Security**: Auth check moved before body parse; removed redundant `User.objects.get()` in favor of `request.user`.
+- **Fixed**: `FeedbackDataAdmin.changeform_view()` — null guard added after `get_object()` to prevent `AttributeError` when object does not exist.
+- **Fixed**: OK button in result modal now wrapped in `<form method="dialog">` — dialog closes correctly, `close` event fires `location.reload()`.
+- **Fixed**: Buttons missing `type="button"` were inadvertently submitting the admin form — fixed across all modals.
+- **Fixed**: Modals moved to `document.body` via JS — eliminates content flash at page bottom during closing animation.
+- **Fixed**: Import cleanup in `feedbacks/admin.py` — removed unused `display` import, moved `FEEDBACK_COOLDOWN_SECONDS` import to top.
+- **Added**: Full i18n (`{% trans %}`, `{% blocktrans %}`, `gettext_lazy`) across feedback templates and `modeladmin.py` (12 strings); Vietnamese translations updated in `locale/vi`.
+- **Added**: `feedback_cooldown_ms` passed from server via `FeedbackBaseAdmin.render_change_form()` — no more hardcoded 60000ms in template.
+
+### v0.2.42 (2026-03-31)
 **Improve: persist filter/search state in admin changelist + fix Django duplicate filter bug**
 - **Added**: Filter/search state is now persisted via `sessionStorage` across navigation — selecting a filter, navigating to a detail page, then returning restores the exact filter state automatically.
 - **Fixed**: Django bug — `add_preserved_filters()` uses `dict(parse_qsl())` which drops duplicate filter params (e.g. `?chapter__id__exact=29&chapter__id__exact=31` → only `=31` kept after save). Fixed server-side in `ModelAdmin._fix_preserved_filters()` — rebuilds the redirect URL with `parse_qsl()` (preserves all values) when duplicates are detected.

{django_whiteneuron-0.2.42 → django_whiteneuron-0.2.47}/django_whiteneuron.egg-info/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: django-whiteneuron
-Version: 0.2.42
+Version: 0.2.47
 Summary: A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold.
-Author-email: White Neuron <anhnt@whiteneuron.com>
+Author-email: White Neuron <anhnt@whiteneuron.ai>
 License: MIT License
         
         Copyright (c) 2025 Nguyễn Tú Anh
@@ -25,7 +25,7 @@ License: MIT License
         OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
         SOFTWARE.
         
-Project-URL: homepage, https://github.com/White-Neuron/django-whiteneuron
+Project-URL: homepage, https://whiteneuron.ai
 Project-URL: repository, https://github.com/White-Neuron/django-whiteneuron
 Project-URL: changelog, https://github.com/White-Neuron/django-whiteneuron/releases
 Project-URL: Bug Tracker, https://github.com/White-Neuron/django-whiteneuron/issues
@@ -34,7 +34,7 @@ Keywords: django,plugin,admin,dashboard,whiteneuron
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: Framework :: Django
-Classifier: Framework :: Django :: 5.0
+Classifier: Framework :: Django :: 5.2
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
@@ -44,7 +44,7 @@ Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: django-debug-toolbar>=5.0.1
-Requires-Dist: django>=5.1.6
+Requires-Dist: django>=5.2.12
 Requires-Dist: django-celery-beat>=2.7.0
 Requires-Dist: django-guardian>=2.4.0
 Requires-Dist: django-imagekit>=5.0.0
@@ -58,7 +58,7 @@ Requires-Dist: markdown>=3.7
 Requires-Dist: openai>=1.58.1
 Requires-Dist: openpyxl>=3.1.5
 Requires-Dist: pandas>=2.2.3
-Requires-Dist: pillow>=11.0.0
+Requires-Dist: pillow>=12.1.1
 Requires-Dist: python-dotenv>=1.0.1
 Requires-Dist: redis>=5.2.1
 Requires-Dist: sentry-sdk==2.28.0
@@ -74,6 +74,7 @@ Requires-Dist: django-ckeditor-5>=0.2.18
 Requires-Dist: django-cors-headers>=4.3.0
 Requires-Dist: django-unfold>=0.85.0
 Requires-Dist: djangoql>=0.18.1
+Requires-Dist: cryptography>=46.0.5
 Provides-Extra: dev
 Requires-Dist: pytest; extra == "dev"
 Requires-Dist: black; extra == "dev"
@@ -94,18 +95,50 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Current Version
 
-- 0.2.42
+- 0.2.45
 
 ## Compatibility
 
 - Python >= 3.11
-- Django >= 5.1.6
+- Django >= 5.2.12
 - django-unfold >= 0.85.0
 - Tailwind CSS 4.x + daisyUI 5.x (for the bundled frontend styles)
 
 ## Changelog
 
-### v0.2.42 (2026-03-31) — latest
+### v0.2.45 (2026-04-03) — latest
+**Security: 11 CVE fixes across django, pillow, cryptography, pyasn1**
+- **Security**: `django` lower bound raised from `>=5.1.6` to `>=5.2.12` — patches 7 CVEs including SQL Injection (CVE-2026-1207), DoS ×5, race condition in file-system storage (CVE-2026-25674), and URLField vulnerability (CVE-2026-25673).
+- **Security**: `pillow` lower bound raised from `>=11.0.0` to `>=12.1.1` — patches heap buffer overflow (CVE-2026-25990).
+- **Security**: `cryptography>=46.0.5` added as explicit dependency — patches Improper Input Validation (CVE-2026-26007); previously uncontrolled transitive dependency.
+- **Security**: `pyasn1>=0.6.2` added as explicit dependency — patches CVE-2026-23490; `==0.6.1` was the sole affected version.
+- **Validation**: `safety` scan confirms 0 known vulnerabilities after upgrade (down from 11).
+
+### v0.2.44 (2026-04-02)
+**Fixes & Improvements: Feedback System — Error handling, input limits, i18n lazy evaluation**
+- **Fixed**: `changeform_view` now returns `JsonResponse({"success": True})` after a successful resolve instead of falling through to `super()` with a POST request — prevents a spurious HTTP 403 caused by `has_change_permission = False`.
+- **Fixed**: `note` is read from `request.POST` instead of `request.GET` — prevents HTTP 414 (URI Too Long) when the note is lengthy.
+- **Fixed**: JS `fetch` upgraded to POST + `FormData` with CSRF token; error handling now maps status codes (403/404/500/network) to specific user-facing messages.
+- **Added**: Two-sided character limits — `maxlength` attribute + live counter on client; server-side validation: `note ≤ 500`, `feedback_message ≤ 2000`.
+- **Added**: `get_short_message()` in `FeedbackDataAdmin.list_display` — truncates to 200 words via Django's `Truncator`.
+- **Fixed**: `search_help_text` moved from `__init__` to a `@property` using `format_lazy` — now re-evaluates per request and responds correctly to language switches instead of being frozen at server startup.
+- **Improved**: `base_badge_callback()` accepts an optional `filter_kwargs` parameter; `feedback_data_badge_callback()` now scopes the badge count to the current user for non-superusers.
+
+### v0.2.43 (2026-04-01)
+**Feature: Feedback System — DaisyUI modals, anti-spam cooldown, i18n, security hardening**
+- **Added**: DaisyUI `<dialog>` modals replace native `prompt()`/`alert()` in both `feedback_change_form.html` (Mark as Resolved flow) and `submit_line.html` (Feedback submission) — smooth animations, no browser dialogs.
+- **Added**: Server-side anti-spam cooldown — 60s per user globally; HTTP 429 with dynamically calculated remaining seconds (`remaining = 60 - elapsed`).
+- **Security**: Replaced `@csrf_exempt` with `@require_POST` in feedback endpoint — CSRF protection fully enforced via `X-CSRFToken` header.
+- **Security**: Auth check moved before body parse; removed redundant `User.objects.get()` in favor of `request.user`.
+- **Fixed**: `FeedbackDataAdmin.changeform_view()` — null guard added after `get_object()` to prevent `AttributeError` when object does not exist.
+- **Fixed**: OK button in result modal now wrapped in `<form method="dialog">` — dialog closes correctly, `close` event fires `location.reload()`.
+- **Fixed**: Buttons missing `type="button"` were inadvertently submitting the admin form — fixed across all modals.
+- **Fixed**: Modals moved to `document.body` via JS — eliminates content flash at page bottom during closing animation.
+- **Fixed**: Import cleanup in `feedbacks/admin.py` — removed unused `display` import, moved `FEEDBACK_COOLDOWN_SECONDS` import to top.
+- **Added**: Full i18n (`{% trans %}`, `{% blocktrans %}`, `gettext_lazy`) across feedback templates and `modeladmin.py` (12 strings); Vietnamese translations updated in `locale/vi`.
+- **Added**: `feedback_cooldown_ms` passed from server via `FeedbackBaseAdmin.render_change_form()` — no more hardcoded 60000ms in template.
+
+### v0.2.42 (2026-03-31)
 **Improve: persist filter/search state in admin changelist + fix Django duplicate filter bug**
 - **Added**: Filter/search state is now persisted via `sessionStorage` across navigation — selecting a filter, navigating to a detail page, then returning restores the exact filter state automatically.
 - **Fixed**: Django bug — `add_preserved_filters()` uses `dict(parse_qsl())` which drops duplicate filter params (e.g. `?chapter__id__exact=29&chapter__id__exact=31` → only `=31` kept after save). Fixed server-side in `ModelAdmin._fix_preserved_filters()` — rebuilds the redirect URL with `parse_qsl()` (preserves all values) when duplicates are detected.

{django_whiteneuron-0.2.42 → django_whiteneuron-0.2.47}/django_whiteneuron.egg-info/requires.txt

@@ -1,5 +1,5 @@
 django-debug-toolbar>=5.0.1
-django>=5.1.6
+django>=5.2.12
 django-celery-beat>=2.7.0
 django-guardian>=2.4.0
 django-imagekit>=5.0.0
@@ -13,7 +13,7 @@ markdown>=3.7
 openai>=1.58.1
 openpyxl>=3.1.5
 pandas>=2.2.3
-pillow>=11.0.0
+pillow>=12.1.1
 python-dotenv>=1.0.1
 redis>=5.2.1
 sentry-sdk==2.28.0
@@ -29,6 +29,7 @@ django-ckeditor-5>=0.2.18
 django-cors-headers>=4.3.0
 django-unfold>=0.85.0
 djangoql>=0.18.1
+cryptography>=46.0.5
 
 [dev]
 pytest

{django_whiteneuron-0.2.42 → django_whiteneuron-0.2.47}/pyproject.toml

@@ -1,16 +1,16 @@
 [project]
 name = "django-whiteneuron"
-version = "0.2.42"
+version = "0.2.47"
 description = "A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold."
 authors = [
-    {name = "White Neuron", email = "anhnt@whiteneuron.com"}
+    {name = "White Neuron", email = "anhnt@whiteneuron.ai"}
 ]
 license = {file = "LICENSE"}
 readme = "README.md"
 keywords = ["django", "plugin", "admin", "dashboard", "whiteneuron"]
 dependencies = [
     "django-debug-toolbar>=5.0.1",
-    "django>=5.1.6",
+    "django>=5.2.12",
     "django-celery-beat>=2.7.0",
     "django-guardian>=2.4.0",
     "django-imagekit>=5.0.0",
@@ -24,7 +24,7 @@ dependencies = [
     "openai>=1.58.1",
     "openpyxl>=3.1.5",
     "pandas>=2.2.3",
-    "pillow>=11.0.0",
+    "pillow>=12.1.1",
     "python-dotenv>=1.0.1",
     "redis>=5.2.1",
     "sentry-sdk==2.28.0",
@@ -40,6 +40,7 @@ dependencies = [
     'django-cors-headers>=4.3.0',
     "django-unfold>=0.85.0",
     "djangoql>=0.18.1",
+    "cryptography>=46.0.5",
 ]
 requires-python = ">=3.11"
 
@@ -47,7 +48,7 @@ classifiers = [
     "Development Status :: 4 - Beta",
     "Intended Audience :: Developers",
     "Framework :: Django",
-    "Framework :: Django :: 5.0",
+    "Framework :: Django :: 5.2",
     "Programming Language :: Python :: 3",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
@@ -56,37 +57,23 @@ classifiers = [
 ]
 
 [project.urls]
-homepage = "https://github.com/White-Neuron/django-whiteneuron"
+homepage = "https://whiteneuron.ai"
 repository = "https://github.com/White-Neuron/django-whiteneuron"
 changelog = "https://github.com/White-Neuron/django-whiteneuron/releases"
 "Bug Tracker" = "https://github.com/White-Neuron/django-whiteneuron/issues"
 "PyPI" = "https://pypi.org/project/django-whiteneuron/"
 
-[tool.setuptools]
 [tool.setuptools.packages.find]
 where = ["."]
 include = ["whiteneuron*"]
 
 [tool.setuptools.package-data]
 "whiteneuron" = [
-    "base/templates/**/*",
-    "base/static/**/*",
-    "feedbacks/templates/**/*",
-    "feedbacks/static/**/*",
     "templates/**/*",
-    "templates/**/**/*",
-    "templates/**/**/**/*",
     "static/**/*",
-    "static/**/**/*",
-    "static/**/**/**/*",
-    'locale/**/*',
-    'locale/**/**/*',
-    'locale/**/**/**/*',
+    "locale/**/*",
 ]
 
-[tool.uv.workspace]
-members = ["demo"]
-
 [project.optional-dependencies]
 dev = ["pytest", "black", "flake8", "pre-commit"]
 

{django_whiteneuron-0.2.42 → django_whiteneuron-0.2.47}/whiteneuron/base/admin.py

@@ -1,3 +1,4 @@
+import types as _types
 from typing import Sequence
 from django import forms
 from django.contrib import admin, messages
@@ -623,67 +624,32 @@ class MailAdmin(ModelAdmin):
 
 
 from django.conf import settings
-from django.core.cache import cache
-
-def init_app_db():
-    # Kiểm tra xem hàm đã được chạy chưa
-    cache_key = 'init_app_db_executed'
-    cached_value = cache.get(cache_key)
-    # Đã chạy rồi, bỏ qua
-    if cached_value is not None:
-        return
-    
-    # Get apps from SIDEBAR in UNFOLD settings
-    sidebar_apps= []
+
+def _parse_sidebar_apps():
+    """Parse UNFOLD SIDEBAR settings into app-like objects. No DB access."""
+    apps = []
     try:
-        sidebar= settings.UNFOLD.get('SIDEBAR', {})
-        navigation= sidebar.get('navigation', [])
+        navigation = settings.UNFOLD.get('SIDEBAR', {}).get('navigation', [])
         for section in navigation:
-            category= section.get('title', None)
-            items= section.get('items', [])
-            for item in items:
-                app_name= item.get('title', None)
-                link= item.get('link', None)
-                if '/base/app/' in str(link):
-                    # bỏ qua link quản trị app
+            category = section.get('title')
+            for item in section.get('items', []):
+                name = item.get('title')
+                link = item.get('link')
+                if not (name and link) or '/base/app/' in str(link):
                     continue
-                icon= item.get('icon', None)
-                permission= item.get('permission', None)
-                thumbnail_url= item.get('thumbnail', None)
-                if app_name and link:
-                    sidebar_apps.append({
-                        'name': app_name,
-                        'url': link,
-                        'icon': icon,
-                        'category': category,
-                        'permission': permission,
-                        'thumbnail_url': thumbnail_url,
-                    })
-    except:
+                apps.append(_types.SimpleNamespace(
+                    pk=None,
+                    name=name,
+                    url=link,
+                    icon=item.get('icon'),
+                    category=category,
+                    permission=item.get('permission'),
+                    thumbnail_url=item.get('thumbnail'),
+                    is_active=True,
+                ))
+    except Exception:
         pass
-    # Cập nhật hoặc tạo mới các app từ sidebar_apps
-    for app in sidebar_apps:
-        obj= App.objects.filter(url= app['url']).first()
-        if obj is None:
-            obj= App()
-        obj.name= app['name']
-        obj.url= app['url']
-        obj.icon= app['icon']
-        obj.category= app['category']
-        obj.permission= app['permission']
-        obj.thumbnail_url= app['thumbnail_url']
-        obj.is_active= True
-        obj.save(notification= False)
-
-    # set active= False cho các app không có trong sidebar_apps
-    existing_apps= App.objects.all()
-    for obj in existing_apps:
-        if not any(app['url'] == obj.url for app in sidebar_apps):
-            obj.is_active= False
-            obj.save(notification= False)
-    
-    # Re-sync every 5 minutes so SIDEBAR changes are picked up without manual cache clear
-    cache.set(cache_key, True, timeout=300)
+    return apps
 
 # App Model Admin
 from django.utils.module_loading import import_string
@@ -694,29 +660,8 @@ class AppAdmin(ModelAdmin):
     list_before_template= 'admin/header.html'
     change_list_template= 'admin/base/app_change_list.html'
 
-    list_display = ['icon_display', 'name', 'is_active', 'category', 'permission']
-    search_fields = ['name']
-    list_filter = ['is_active', 'category']
-    readonly_fields = ['icon_display']
-    fieldsets = (
-        (_('App info'), {
-            'fields': ('name', 'is_active', 'icon', 'url')
-        }),
-    )
-
-    list_filter_submit= False
-
     default_toggle_sidebar= False
 
-    def icon_display(self, instance: App):
-        if instance.icon:
-            if instance.icon.startswith('http://') or instance.icon.startswith('https://'):
-                return format_html(f'<img src="{instance.icon}" height="48"/>')
-            else:
-                return format_html(f'<span class="material-symbols-outlined" style="font-size: 48px;">{instance.icon}</span>')
-        return None
-    icon_display.short_description = _('Icon')
-
     def has_add_permission(self, request):
         return False
     
@@ -726,90 +671,32 @@ class AppAdmin(ModelAdmin):
     def has_delete_permission(self, request, obj = ...):
         return False
 
-    grid_view= True
-    grid_exclude_fields_list_display= ['icon_display', 'is_active', 'name', 'category', 'permission']
-    action_buttons= False
-
-    def grid_item_header(self, obj):
-        if obj.thumbnail_url:
-            icon_html = f'<img src="{static(obj.thumbnail_url)}" class="w-14 h-14 object-contain rounded-xl"/>'
-        elif obj.icon and (obj.icon.startswith('http://') or obj.icon.startswith('https://')):
-            icon_html = f'<img src="{obj.icon}" class="w-14 h-14 object-contain rounded-xl"/>'
-        elif obj.icon:
-            icon_html = f'<span class="material-symbols-outlined" style="font-size:3.5rem;line-height:1">{obj.icon}</span>'
-        else:
-            icon_html = '<span class="material-symbols-outlined text-base-content/30" style="font-size:3.5rem;line-height:1">apps</span>'
-
-        category_html = (
-            f'<span class="text-xs text-base-content/40 mt-1 truncate max-w-full">{_(obj.category)}</span>'
-            if obj.category else ''
-        )
-
-        string = f"""
-<div class="ui-card h-full flex flex-col items-center justify-center gap-3 p-5 bg-base-100 dark:bg-base-800 border border-base-200 dark:border-base-700 hover:border-primary/40 dark:hover:border-primary/50 hover:shadow-lg dark:hover:shadow-base-content/10 transition-all duration-200 cursor-pointer group rounded-2xl">
-    <div class="flex items-center justify-center w-16 h-16 rounded-2xl bg-base-200/60 dark:bg-base-700/40 group-hover:bg-primary/10 dark:group-hover:bg-primary/15 transition-colors duration-200 text-primary">
-        {icon_html}
-    </div>
-    <div class="flex flex-col items-center text-center gap-0.5 w-full">
-        <span class="font-semibold text-sm leading-snug line-clamp-2">{_(obj.name)}</span>
-        {category_html}
-    </div>
-</div>
-"""
-        return mark_safe(string)
-    grid_item_header.short_description = "Header"
-
-    def has_permission(self, request, obj= None):
+    def has_permission(self, request, obj=None):
         if request.user.is_superuser:
             return True
-        permission= obj.permission if obj else None # string like: 'whiteneuron.base.utils.permission_admin_callback'
+        permission = obj.permission if obj else None
         if permission:
-            perm_func= import_string(permission)
-            if perm_func:
-                return perm_func(request)
+            perm_func = permission if callable(permission) else import_string(permission)
+            return perm_func(request)
         return True
 
     def get_queryset(self, request):
-        init_app_db()
-        queryset = super(AppAdmin, self).get_queryset(request).filter(is_active=True)
-
-        if request.user.is_superuser:
-            return queryset
-
-        allowed_ids = [obj.pk for obj in queryset if self.has_permission(request, obj)]
-        return queryset.filter(pk__in=allowed_ids)
-    
-    def changeform_view(self, request, object_id=None, form_url="", extra_context=None):
-        ## Điều hướng tới url của app
-        app= get_object_or_404(App, pk= object_id)
-        if not app.is_active:
-            messages.error(request, _("This app is not active."))
-            return redirect(reverse_lazy('admin:base_app_changelist'))
-        if not self.has_permission(request, app):
-            messages.error(request, _("You do not have permission to access this app."))
-            return redirect(reverse_lazy('admin:base_app_changelist'))
-        if app.url:
-            return redirect(app.url)
-        return super().changeform_view(request, object_id, form_url, extra_context)
+        return super().get_queryset(request).none()
 
     def changelist_view(self, request, extra_context=None):
         if extra_context is None:
-            extra_context= {}
+            extra_context = {}
         extra_context.update(dashboard_callback(request, extra_context))
-        extra_context['title']= _('Dashboard')
+        extra_context['title'] = _('Dashboard')
+
+        apps = _parse_sidebar_apps()
+        if not request.user.is_superuser:
+            apps = [app for app in apps if self.has_permission(request, app)]
 
-        # Group apps by category for two-level grid UI
-        qs = self.get_queryset(request)
         app_by_category = {}
-        for app in qs:
+        for app in apps:
             cat = app.category or ''
             app_by_category.setdefault(cat, []).append(app)
-        # Sort: named categories alphabetically, unnamed ("Other") last
-        extra_context['app_by_category'] = dict(
-            sorted(app_by_category.items(), key=lambda x: (x[0] == '', x[0].lower()))
-        )
-
-        return super().changelist_view(request, extra_context)
+        extra_context['app_by_category'] = app_by_category
 
-    def get_list_filter(self, request):
-        return ['category']
+        return super().changelist_view(request, extra_context)