wbhuman_resources 1.59.14__tar.gz → 1.59.16__tar.gz

{wbhuman_resources-1.59.14 → wbhuman_resources-1.59.16}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: wbhuman_resources
-Version: 1.59.14
+Version: 1.59.16
 Summary: A workbench module for managing human resources.
 Author-email: Christopher Wittlinger <c.wittlinger@stainly.com>
 Requires-Dist: wbcore

{wbhuman_resources-1.59.14 → wbhuman_resources-1.59.16}/wbhuman_resources/models/absence.py

@@ -38,6 +38,17 @@ from .preferences import get_previous_year_balance_expiration_date
 User = get_user_model()
 
 
+def can_edit_request(instance: "AbsenceRequest", user: "User") -> bool:
+    if (employee := getattr(user.profile, "human_resources", None)) and employee.is_active and user.profile:
+        requester = instance.employee
+        return instance.status == AbsenceRequest.Status.DRAFT and (
+            user.has_perm("wbhuman_resources.administrate_absencerequest")
+            or employee.is_manager_of(requester)
+            or user.profile == requester.profile
+        )
+    return False
+
+
 def can_cancel_request(instance: "AbsenceRequest", user: "User") -> bool:
     """
     Check if the given user has cancel ability on the given request

{wbhuman_resources-1.59.14 → wbhuman_resources-1.59.16}/wbhuman_resources/serializers/__init__.py

@@ -1,6 +1,7 @@
 from .absence import (
     AbsenceRequestCrossBorderCountryModelSerializer,
     AbsenceRequestModelSerializer,
+    ReadOnlyAbsenceRequestModelSerializer,
     AbsenceRequestPeriodsModelSerializer,
     AbsenceRequestTypeModelSerializer,
     AbsenceRequestTypeRepresentationSerializer,

{wbhuman_resources-1.59.14 → wbhuman_resources-1.59.16}/wbhuman_resources/serializers/absence.py

@@ -269,6 +269,11 @@ class AbsenceRequestModelSerializer(wb_serializers.ModelSerializer):
         ]
 
 
+class ReadOnlyAbsenceRequestModelSerializer(AbsenceRequestModelSerializer):
+    class Meta(AbsenceRequestModelSerializer.Meta):
+        read_only_fields = AbsenceRequestModelSerializer.Meta.fields
+
+
 class EmployeeAbsenceDaysModelSerializer(wb_serializers.ModelSerializer):
     year = wb_serializers.YearField(read_only=True)
     absence_type = wb_serializers.ChoiceField(read_only=True, choices=AbsenceRequestType.get_choices())

{wbhuman_resources-1.59.14 → wbhuman_resources-1.59.16}/wbhuman_resources/viewsets/absence.py

@@ -32,6 +32,7 @@ from wbhuman_resources.serializers import (
     AbsenceRequestTypeModelSerializer,
     AbsenceRequestTypeRepresentationSerializer,
     EmployeeAbsenceDaysModelSerializer,
+    ReadOnlyAbsenceRequestModelSerializer,
 )
 from wbhuman_resources.viewsets.buttons import AbsenceRequestButtonConfig
 from wbhuman_resources.viewsets.display import (
@@ -54,7 +55,7 @@ from wbhuman_resources.viewsets.titles import (
     AbsenceTypeCountEmployeeTitleConfig,
 )
 
-from ..models.absence import can_validate_or_deny_request
+from ..models.absence import can_edit_request, can_validate_or_deny_request
 from .mixins import EmployeeViewMixin
 
 
@@ -108,6 +109,17 @@ class AbsenceRequestModelViewSet(EmployeeViewMixin, viewsets.ModelViewSet):
             return can_validate_or_deny_request(obj, self.request.user)
         return False
 
+    @cached_property
+    def can_edit_request(self) -> bool:
+        if "pk" in self.kwargs and (obj := self.get_object()):
+            return can_edit_request(obj, self.request.user)
+        return True
+
+    def get_serializer_class(self):
+        if self.can_edit_request:
+            return AbsenceRequestModelSerializer
+        return ReadOnlyAbsenceRequestModelSerializer
+
     def add_messages(
         self,
         request,

{wbhuman_resources-1.59.14 → wbhuman_resources-1.59.16}/wbhuman_resources/viewsets/endpoints/absence.py

@@ -18,7 +18,9 @@ class AbsenceRequestEndpointConfig(EndpointViewConfig):
         return self.get_endpoint()
 
     def get_create_endpoint(self, **kwargs):
-        return self.get_endpoint()
+        if (profile := self.request.user.profile) and hasattr(profile, "human_resources"):
+            return self.get_endpoint()
+        return None
 
     def get_delete_endpoint(self, **kwargs):
         if self.instance: