zou 0.19.15__py3-none-any.whl → 0.20.11__py3-none-any.whl

zou/app/blueprints/previews/resources.py

@@ -1,4 +1,5 @@
 import os
+import orjson as json
 
 from flask import abort, request, current_app
 from flask import send_file as flask_send_file
@@ -11,7 +12,8 @@ from zou.app import config
 from zou.app.mixin import ArgsMixin
 from zou.app.stores import file_store
 from zou.app.services import (
-    assets_service,
+    comments_service,
+    chats_service,
     deletion_service,
     entities_service,
     files_service,
@@ -19,7 +21,6 @@ from zou.app.services import (
     persons_service,
     projects_service,
     preview_files_service,
-    shots_service,
     tasks_service,
     user_service,
 )
@@ -30,9 +31,10 @@ from zou.app.utils import (
     events,
     permissions,
     thumbnail as thumbnail_utils,
+    date_helpers,
 )
 from zou.app.services.exception import (
-    ArgumentsException,
+    WrongParameterException,
     PreviewBackgroundFileNotFoundException,
     PreviewFileReuploadNotAllowedException,
 )
@@ -62,16 +64,21 @@ ALLOWED_FILE_EXTENSION = [
     "glb",
     "gltf",
     "hip",
+    "kra",
     "ma",
     "mb",
     "mp3",
     "obj",
     "pdf",
     "psd",
+    "psb",
     "rar",
+    "sai",
+    "sai2",
     "sbbkp",
     "svg",
     "swf",
+    "tvpp",
     "wav",
     "zip",
 ]
@@ -83,6 +90,7 @@ def send_standard_file(
     extension,
     mimetype="application/octet-stream",
     as_attachment=False,
+    last_modified=None,
 ):
     return send_storage_file(
         file_store.get_local_file_path,
@@ -92,10 +100,13 @@ def send_standard_file(
         extension,
         mimetype=mimetype,
         as_attachment=as_attachment,
+        last_modified=last_modified,
     )
 
 
-def send_movie_file(preview_file_id, as_attachment=False, lowdef=False):
+def send_movie_file(
+    preview_file_id, as_attachment=False, lowdef=False, last_modified=None
+):
     folder = "previews"
     if lowdef:
         folder = "lowdef"
@@ -107,6 +118,7 @@ def send_movie_file(preview_file_id, as_attachment=False, lowdef=False):
         "mp4",
         mimetype="video/mp4",
         as_attachment=as_attachment,
+        last_modified=last_modified,
     )
 
 
@@ -116,6 +128,7 @@ def send_picture_file(
     as_attachment=False,
     extension="png",
     download_name="",
+    last_modified=None,
 ):
     if extension == "png":
         mimetype = "image/png"
@@ -130,6 +143,7 @@ def send_picture_file(
         mimetype=mimetype,
         as_attachment=as_attachment,
         download_name=download_name,
+        last_modified=last_modified,
     )
 
 
@@ -143,6 +157,7 @@ def send_storage_file(
     as_attachment=False,
     max_age=config.CLIENT_CACHE_MAX_AGE,
     download_name="",
+    last_modified=None,
 ):
     """
     Send file from storage. If it's not a local storage, cache the file in
@@ -186,111 +201,18 @@ def send_storage_file(
             as_attachment=as_attachment,
             download_name=download_name,
             max_age=max_age,
+            last_modified=last_modified,
         )
     except IOError as e:
         current_app.logger.error(e)
         raise FileNotFound
 
 
-class CreatePreviewFilePictureResource(Resource, ArgsMixin):
+class BaseNewPreviewFilePicture:
     """
-    Main resource to add a preview. It stores the preview file and generates
-    three picture files matching preview when it's possible: a square thumbnail,
-    a rectangle thumbnail and a midsize file.
+    Base class to add previews.
     """
 
-    @jwt_required()
-    def post(self, instance_id):
-        """
-        Main resource to add a preview.
-        ---
-        tags:
-          - Previews
-        description: "It stores the preview file and generates three picture files matching preview when it's possible: a square thumbnail, a rectangle thumbnail and a midsize file."
-        consumes:
-          - multipart/form-data
-          - image/png
-          - application/pdf
-        parameters:
-          - in: path
-            name: instance_id
-            required: True
-            type: string
-            format: UUID
-            x-example: a24a6ea4-ce75-4665-a070-57453082c25
-          - in: formData
-            name: file
-            required: True
-            type: file
-        responses:
-            200:
-                description: Preview added
-        """
-        if not self.is_exist(instance_id):
-            abort(404)
-
-        if not self.is_allowed(instance_id):
-            abort(403)
-
-        uploaded_file = request.files["file"]
-
-        file_name_parts = uploaded_file.filename.split(".")
-        extension = file_name_parts.pop().lower()
-        original_file_name = ".".join(file_name_parts)
-
-        if extension in ALLOWED_PICTURE_EXTENSION:
-            metadada = self.save_picture_preview(instance_id, uploaded_file)
-            preview_file = preview_files_service.update_preview_file(
-                instance_id,
-                {
-                    "extension": "png",
-                    "original_name": original_file_name,
-                    "width": metadada["width"],
-                    "height": metadada["height"],
-                    "file_size": metadada["file_size"],
-                    "status": "ready",
-                },
-            )
-            tasks_service.update_preview_file_info(preview_file)
-            self.emit_app_preview_event(instance_id)
-            return preview_file, 201
-
-        elif extension in ALLOWED_MOVIE_EXTENSION:
-            try:
-                normalize = self.get_bool_parameter("normalize", "true")
-                self.save_movie_preview(instance_id, uploaded_file, normalize)
-            except Exception as e:
-                current_app.logger.error(e, exc_info=1)
-                current_app.logger.error("Normalization failed.")
-                deletion_service.remove_preview_file_by_id(instance_id)
-                abort(400, "Normalization failed.")
-            preview_file = preview_files_service.update_preview_file(
-                instance_id,
-                {"extension": "mp4", "original_name": original_file_name},
-            )
-            self.emit_app_preview_event(instance_id)
-            return preview_file, 201
-
-        elif extension in ALLOWED_FILE_EXTENSION:
-            self.save_file_preview(instance_id, uploaded_file, extension)
-            preview_file = preview_files_service.update_preview_file(
-                instance_id,
-                {
-                    "extension": extension,
-                    "original_name": original_file_name,
-                    "status": "ready",
-                },
-            )
-            self.emit_app_preview_event(instance_id)
-            return preview_file, 201
-
-        else:
-            current_app.logger.info(
-                "Wrong file format, extension: %s", extension
-            )
-            deletion_service.remove_preview_file_by_id(instance_id)
-            abort(400, "Wrong file format, extension: %s" % extension)
-
     def save_picture_preview(self, instance_id, uploaded_file):
         """
         Get uploaded picture, build thumbnails then save everything in the file
@@ -333,8 +255,6 @@ class CreatePreviewFilePictureResource(Resource, ArgsMixin):
             preview_files_service.prepare_and_store_movie(
                 preview_file_id, uploaded_movie_path, normalize=normalize
             )
-            preview_file = files_service.get_preview_file(preview_file_id)
-            tasks_service.update_preview_file_info(preview_file)
         return preview_file_id
 
     def save_file_preview(self, instance_id, uploaded_file, extension):
@@ -381,6 +301,112 @@ class CreatePreviewFilePictureResource(Resource, ArgsMixin):
                 project_id=task["project_id"],
             )
 
+    def process_uploaded_file(
+        self, instance_id, uploaded_file, abort_on_failed=False
+    ):
+        file_name_parts = uploaded_file.filename.split(".")
+        extension = file_name_parts.pop().lower()
+        original_file_name = ".".join(file_name_parts)
+        preview_file = None
+        if extension in ALLOWED_PICTURE_EXTENSION:
+            metadada = self.save_picture_preview(instance_id, uploaded_file)
+            preview_file = preview_files_service.update_preview_file(
+                instance_id,
+                {
+                    "extension": "png",
+                    "original_name": original_file_name,
+                    "width": metadada["width"],
+                    "height": metadada["height"],
+                    "file_size": metadada["file_size"],
+                    "status": "ready",
+                },
+            )
+            tasks_service.update_preview_file_info(preview_file)
+        elif extension in ALLOWED_MOVIE_EXTENSION:
+            try:
+                normalize = self.get_bool_parameter("normalize", "true")
+                self.save_movie_preview(instance_id, uploaded_file, normalize)
+            except Exception as e:
+                current_app.logger.error(e, exc_info=1)
+                current_app.logger.error("Normalization failed.")
+                deletion_service.remove_preview_file_by_id(
+                    instance_id, force=True
+                )
+                if abort_on_failed:
+                    abort(400, "Normalization failed.")
+            preview_file = preview_files_service.update_preview_file(
+                instance_id,
+                {"extension": "mp4", "original_name": original_file_name},
+            )
+        elif extension in ALLOWED_FILE_EXTENSION:
+            self.save_file_preview(instance_id, uploaded_file, extension)
+            preview_file = preview_files_service.update_preview_file(
+                instance_id,
+                {
+                    "extension": extension,
+                    "original_name": original_file_name,
+                    "status": "ready",
+                },
+            )
+
+        if preview_file is None:
+            current_app.logger.info(
+                "Wrong file format, extension: %s", extension
+            )
+            deletion_service.remove_preview_file_by_id(instance_id)
+            if abort_on_failed:
+                abort(400, "Wrong file format, extension: %s" % extension)
+        else:
+            self.emit_app_preview_event(instance_id)
+        return preview_file
+
+
+class CreatePreviewFilePictureResource(
+    BaseNewPreviewFilePicture, Resource, ArgsMixin
+):
+    """
+    Main resource to add a preview. It stores the preview file and generates
+    three picture files matching preview when it's possible: a square thumbnail,
+    a rectangle thumbnail and a midsize file.
+    """
+
+    @jwt_required()
+    def post(self, instance_id):
+        """
+        Main resource to add a preview.
+        ---
+        tags:
+          - Previews
+        description: "It stores the preview file and generates three picture files matching preview when it's possible: a square thumbnail, a rectangle thumbnail and a midsize file."
+        consumes:
+          - multipart/form-data
+          - image/png
+          - application/pdf
+        parameters:
+          - in: path
+            name: instance_id
+            required: True
+            type: string
+            format: UUID
+            x-example: a24a6ea4-ce75-4665-a070-57453082c25
+          - in: formData
+            name: file
+            required: True
+            type: file
+        responses:
+            200:
+                description: Preview added
+        """
+        self.is_exist(instance_id)
+        self.is_allowed(instance_id)
+
+        return (
+            self.process_uploaded_file(
+                instance_id, request.files["file"], abort_on_failed=True
+            ),
+            201,
+        )
+
     def is_allowed(self, preview_file_id):
         """
         Return true if user is allowed to add a preview.
@@ -392,10 +418,8 @@ class CreatePreviewFilePictureResource(Resource, ArgsMixin):
             )
             raise PreviewFileReuploadNotAllowedException
 
-        task = tasks_service.get_task(preview_file["task_id"])
         try:
-            user_service.check_project_access(task["project_id"])
-            user_service.check_entity_access(task["entity_id"])
+            user_service.check_task_access(preview_file["task_id"])
             return True
         except permissions.PermissionDenied:
             return False
@@ -407,26 +431,197 @@ class CreatePreviewFilePictureResource(Resource, ArgsMixin):
         return files_service.get_preview_file(preview_file_id) is not None
 
 
-class PreviewFileMovieResource(Resource):
+class BaseBatchComment(BaseNewPreviewFilePicture, ArgsMixin):
     """
-    Allow to download a movie preview.
+    Base class to add comments/previews/attachments.
+    """
+
+    def get_comments_args(self):
+        """
+        Return comments arguments.
+        """
+        if request.is_json:
+            return self.get_args(
+                [
+                    {
+                        "name": "comments",
+                        "required": True,
+                        "default": [],
+                        "type": dict,
+                        "action": "append",
+                        "help": "List of comments to add",
+                    }
+                ],
+            )
+        else:
+            args = self.get_args(
+                [
+                    {
+                        "name": "comments",
+                        "required": True,
+                        "default": "[]",
+                        "help": "List of comments to add",
+                    }
+                ],
+            )
+            args["comments"] = json.loads(args["comments"])
+            return args
+
+    def process_comments(self, task_id=None):
+        """
+        Process comments.
+        """
+        args = self.get_comments_args()
+
+        if task_id is not None:
+            user_service.check_task_access(task_id)
+
+        new_comments = []
+        for i, comment in enumerate(args["comments"]):
+            user_service.check_task_status_access(comment["task_status_id"])
+
+            if task_id is None:
+                user_service.check_task_access(comment["task_id"])
+
+            if not permissions.has_manager_permissions():
+                comment["person_id"] = None
+                comment["created_at"] = None
+
+            new_comment = comments_service.create_comment(
+                comment.get("person_id", None),
+                task_id or comment["task_id"],
+                comment["task_status_id"],
+                comment["text"],
+                comment.get("checklist", []),
+                {
+                    k: v
+                    for (k, v) in request.files.items()
+                    if f"attachment_file-{i}" in k
+                },
+                comment.get("created_at", None),
+                comment.get("links", []),
+            )
+
+            new_comment["preview_files"] = []
+            for uploaded_preview_file in {
+                k: v
+                for (k, v) in request.files.items()
+                if f"preview_file-{i}" in k
+            }.values():
+                new_preview_file = tasks_service.add_preview_file_to_comment(
+                    new_comment["id"],
+                    new_comment["person_id"],
+                    task_id or comment["task_id"],
+                )
+                new_preview_file = self.process_uploaded_file(
+                    new_preview_file["id"],
+                    uploaded_preview_file,
+                    abort_on_failed=False,
+                )
+                if new_preview_file:
+                    new_comment["preview_files"].append(new_preview_file)
+
+            new_comments.append(new_comment)
+
+        return new_comments, 201
+
+
+class AddTaskBatchCommentResource(BaseBatchComment, Resource):
+    """
+    Creates new comments for given task. Each comments requires a text, a
+    task_status and a person as arguments.
+    """
+
+    @jwt_required()
+    def post(self, task_id):
+        """
+        Creates new comments for given task. Each comments requires a text, a
+        task_status and a person as arguments.
+        ---
+        tags:
+        - Comments
+        description: Creates new comments for given task. Each comments requires
+                     a text, a task_status and a person as arguments.
+        parameters:
+          - in: path
+            name: task_id
+            required: True
+            type: string
+            format: UUID
+            x-example: a24a6ea4-ce75-4665-a070-57453082c25
+          - in: body
+            name: Comment
+            description: person ID, name, comment, revision and change status of task
+            schema:
+                type: object
+                required:
+                    - comments
+                properties:
+                    comments:
+                        type: string
+        responses:
+            201:
+                description: New comments created
+        """
+        return self.process_comments(task_id)
+
+
+class AddTasksBatchCommentResource(BaseBatchComment, Resource):
+    """
+    Creates new comments for given tasks. Each comments requires a task_id,
+    text, a task_status and a person as arguments.
+    """
+
+    @jwt_required()
+    def post(self):
+        """
+        Creates new comments for given task. Each comments requires a task_id,
+        text, a task_status and a person as arguments.
+        ---
+        tags:
+        - Comments
+        description: Creates new comments for given task. Each comments requires
+                     a task_id, a text, a task_status and a person as arguments.
+        parameters:
+          - in: body
+            name: Comment
+            description: person ID, name, comment, revision and change status of task
+            schema:
+                type: object
+                required:
+                    - comments
+                properties:
+                    comments:
+                        type: string
+        responses:
+            201:
+                description: New comments created
+        """
+        return self.process_comments()
+
+
+class BasePreviewFileResource(Resource):
+    """
+    Base class to download a preview file.
     """
 
     def __init__(self):
         Resource.__init__(self)
-
-    def is_exist(self, preview_file_id):
-        return files_service.get_preview_file(preview_file_id) is not None
+        self.preview_file = None
+        self.last_modified = None
 
     def is_allowed(self, preview_file_id):
-        preview_file = files_service.get_preview_file(preview_file_id)
-        task = tasks_service.get_task(preview_file["task_id"])
-        try:
-            user_service.check_project_access(task["project_id"])
-            user_service.check_entity_access(task["entity_id"])
-            return True
-        except permissions.PermissionDenied:
-            return False
+        self.preview_file = files_service.get_preview_file(preview_file_id)
+        user_service.check_task_access(self.preview_file["task_id"])
+        self.last_modified = date_helpers.get_datetime_from_string(
+            self.preview_file["updated_at"]
+        )
+
+
+class PreviewFileMovieResource(BasePreviewFileResource):
+    """
+    Allow to download a movie preview.
+    """
 
     @jwt_required()
     def get(self, instance_id):
@@ -451,14 +646,12 @@ class PreviewFileMovieResource(Resource):
             404:
                 description: File not found
         """
-        if not self.is_exist(instance_id):
-            abort(404)
-
-        if not self.is_allowed(instance_id):
-            abort(403)
+        self.is_allowed(instance_id)
 
         try:
-            return send_movie_file(instance_id)
+            return send_movie_file(
+                instance_id, last_modified=self.last_modified
+            )
         except FileNotFound:
             current_app.logger.error(
                 "Movie file was not found for: %s" % instance_id
@@ -466,7 +659,7 @@ class PreviewFileMovieResource(Resource):
             abort(404)
 
 
-class PreviewFileLowMovieResource(PreviewFileMovieResource):
+class PreviewFileLowMovieResource(BasePreviewFileResource):
     """
     Allow to download a lowdef movie preview.
     """
@@ -493,14 +686,17 @@ class PreviewFileLowMovieResource(PreviewFileMovieResource):
             404:
                 description: File not found
         """
-        if not self.is_allowed(instance_id):
-            abort(403)
+        self.is_allowed(instance_id)
 
         try:
-            return send_movie_file(instance_id, lowdef=True)
+            return send_movie_file(
+                instance_id, lowdef=True, last_modified=self.last_modified
+            )
         except Exception:
             try:
-                return send_movie_file(instance_id)
+                return send_movie_file(
+                    instance_id, last_modified=self.last_modified
+                )
             except FileNotFound:
                 current_app.logger.error(
                     "Movie file was not found for: %s" % instance_id
@@ -508,7 +704,7 @@ class PreviewFileLowMovieResource(PreviewFileMovieResource):
                 abort(404)
 
 
-class PreviewFileMovieDownloadResource(PreviewFileMovieResource):
+class PreviewFileMovieDownloadResource(BasePreviewFileResource):
     """
     Allow to download a movie preview.
     """
@@ -535,11 +731,14 @@ class PreviewFileMovieDownloadResource(PreviewFileMovieResource):
             404:
                 description: File not found
         """
-        if not self.is_allowed(instance_id):
-            abort(403)
+        self.is_allowed(instance_id)
 
         try:
-            return send_movie_file(instance_id, as_attachment=True)
+            return send_movie_file(
+                instance_id,
+                as_attachment=True,
+                last_modified=self.last_modified,
+            )
         except FileNotFound:
             current_app.logger.error(
                 "Movie file was not found for: %s" % instance_id
@@ -547,30 +746,11 @@ class PreviewFileMovieDownloadResource(PreviewFileMovieResource):
             abort(404)
 
 
-class PreviewFileResource(Resource):
+class PreviewFileResource(BasePreviewFileResource):
     """
     Allow to download a generic file preview.
     """
 
-    def __init__(self):
-        Resource.__init__(self)
-
-    def is_exist(self, preview_file_id):
-        return files_service.get_preview_file(preview_file_id) is not None
-
-    def is_allowed(self, preview_file_id):
-        if permissions.has_manager_permissions():
-            return True
-        else:
-            preview_file = files_service.get_preview_file(preview_file_id)
-            task = tasks_service.get_task(preview_file["task_id"])
-            try:
-                user_service.check_project_access(task["project_id"])
-                user_service.check_entity_access(task["entity_id"])
-                return True
-            except permissions.PermissionDenied:
-                return False
-
     @jwt_required()
     def get(self, instance_id, extension):
         """
@@ -598,21 +778,26 @@ class PreviewFileResource(Resource):
             404:
                 description: Non-movie file not found
         """
-        if not self.is_exist(instance_id):
-            abort(404)
-
-        if not self.is_allowed(instance_id):
-            abort(403)
+        self.is_allowed(instance_id)
 
         try:
             extension = extension.lower()
             if extension == "png":
-                return send_picture_file("original", instance_id)
+                return send_picture_file(
+                    "original", instance_id, last_modified=self.last_modified
+                )
             elif extension == "pdf":
                 mimetype = "application/pdf"
-                return send_standard_file(instance_id, extension, mimetype)
+                return send_standard_file(
+                    instance_id,
+                    extension,
+                    mimetype,
+                    last_modified=self.last_modified,
+                )
             else:
-                return send_standard_file(instance_id, extension)
+                return send_standard_file(
+                    instance_id, extension, last_modified=self.last_modified
+                )
 
         except FileNotFound:
             current_app.logger.error(
@@ -621,14 +806,11 @@ class PreviewFileResource(Resource):
             abort(404)
 
 
-class PreviewFileDownloadResource(PreviewFileResource):
+class PreviewFileDownloadResource(BasePreviewFileResource):
     """
     Allow to download a generic file preview as attachment.
     """
 
-    def __init__(self):
-        PreviewFileResource.__init__(self)
-
     @jwt_required()
     def get(self, instance_id):
         """
@@ -651,25 +833,40 @@ class PreviewFileDownloadResource(PreviewFileResource):
             404:
                 description: Standard file not found
         """
-        if not self.is_allowed(instance_id):
-            abort(403)
+        self.is_allowed(instance_id)
 
-        preview_file = files_service.get_preview_file(instance_id)
-        extension = preview_file["extension"]
+        extension = self.preview_file["extension"]
 
         try:
             if extension == "png":
                 return send_picture_file(
-                    "original", instance_id, as_attachment=True
+                    "original",
+                    instance_id,
+                    as_attachment=True,
+                    last_modified=self.last_modified,
                 )
             elif extension == "pdf":
                 mimetype = "application/pdf"
                 return send_standard_file(
-                    instance_id, extension, mimetype, as_attachment=True
+                    instance_id,
+                    extension,
+                    mimetype,
+                    as_attachment=True,
+                    last_modified=self.last_modified,
+                )
+            if extension == "mp4":
+                return send_picture_file(
+                    "original",
+                    instance_id,
+                    as_attachment=True,
+                    last_modified=self.last_modified,
                 )
             else:
                 return send_standard_file(
-                    instance_id, extension, as_attachment=True
+                    instance_id,
+                    extension,
+                    as_attachment=True,
+                    last_modified=self.last_modified,
                 )
         except FileNotFound:
             current_app.logger.error(
@@ -678,31 +875,82 @@ class PreviewFileDownloadResource(PreviewFileResource):
             abort(404)
 
 
-class BasePreviewPictureResource(Resource):
+class AttachmentThumbnailResource(Resource):
+
+    def __init__(self):
+        Resource.__init__(self)
+        self.attachment_file = None
+
+    def is_allowed(self, attachment_id):
+        self.attachment_file = comments_service.get_attachment_file(
+            attachment_id
+        )
+        if self.attachment_file["comment_id"] is not None:
+            comment = tasks_service.get_comment(
+                self.attachment_file["comment_id"]
+            )
+            user_service.check_task_access(comment["object_id"])
+        elif self.attachment_file["chat_message_id"] is not None:
+            message = chats_service.get_chat_message(
+                self.attachment_file["chat_message_id"]
+            )
+            chat = chats_service.get_chat_by_id(message["chat_id"])
+            entity = entities_service.get_entity(chat["object_id"])
+            user_service.check_project_access(entity["project_id"])
+            user_service.check_entity_access(chat["object_id"])
+        else:
+            raise permissions.PermissionDenied
+        return True
+
+    @jwt_required()
+    def get(self, attachment_file_id):
+        """
+        Download the thumbnail representing given attachment file.
+        ---
+        tags:
+          - Previews
+        parameters:
+          - in: path
+            name: attachment_file_id
+            required: True
+            type: string
+            format: UUID
+            x-example: a24a6ea4-ce75-4665-a070-57453082c25
+        responses:
+            200:
+                description: Thumbnail downloaded
+            403:
+                description: Instance not allowed
+            404:
+                description: Picture file not found
+        """
+        self.is_allowed(attachment_file_id)
+
+        try:
+            return send_picture_file(
+                "thumbnails",
+                attachment_file_id,
+                last_modified=date_helpers.get_datetime_from_string(
+                    self.attachment_file["updated_at"]
+                ),
+            )
+        except FileNotFound:
+            current_app.logger.error(
+                "Picture file was not found for attachment: %s"
+                % (attachment_file_id)
+            )
+            abort(404)
+
+
+class BasePreviewPictureResource(BasePreviewFileResource):
     """
     Base class to download a thumbnail.
     """
 
     def __init__(self, picture_type):
-        Resource.__init__(self)
+        BasePreviewFileResource.__init__(self)
         self.picture_type = picture_type
 
-    def is_exist(self, preview_file_id):
-        return files_service.get_preview_file(preview_file_id) is not None
-
-    def is_allowed(self, preview_file_id):
-        if permissions.has_manager_permissions():
-            return True
-        else:
-            preview_file = files_service.get_preview_file(preview_file_id)
-            task = tasks_service.get_task(preview_file["task_id"])
-            try:
-                user_service.check_project_access(task["project_id"])
-                user_service.check_entity_access(task["entity_id"])
-                return True
-            except permissions.PermissionDenied:
-                return False
-
     @jwt_required()
     def get(self, instance_id):
         """
@@ -725,14 +973,14 @@ class BasePreviewPictureResource(Resource):
             404:
                 description: Picture file not found
         """
-        if not self.is_exist(instance_id):
-            abort(404)
-
-        if not self.is_allowed(instance_id):
-            abort(403)
+        self.is_allowed(instance_id)
 
         try:
-            return send_picture_file(self.picture_type, instance_id)
+            return send_picture_file(
+                self.picture_type,
+                instance_id,
+                last_modified=self.last_modified,
+            )
         except FileNotFound:
             current_app.logger.error(
                 "Picture file was not found for: %s" % instance_id
@@ -740,7 +988,29 @@ class BasePreviewPictureResource(Resource):
             abort(404)
 
 
-class PreviewFileThumbnailResource(BasePreviewPictureResource):
+class BasePreviewFileThumbnailResource(BasePreviewPictureResource):
+    """
+    Base class to download a thumbnail for a preview file.
+    """
+
+    def is_allowed(self, preview_file_id):
+        self.preview_file = files_service.get_preview_file(preview_file_id)
+        task = tasks_service.get_task(self.preview_file["task_id"])
+        entity = entities_service.get_entity(task["entity_id"])
+        if (
+            entity["preview_file_id"] != preview_file_id
+            or not entity["is_shared"]
+            or permissions.has_vendor_permissions()
+        ):
+            user_service.check_project_access(task["project_id"])
+            user_service.check_entity_access(task["entity_id"])
+        self.last_modified = date_helpers.get_datetime_from_string(
+            self.preview_file["updated_at"]
+        )
+
+
+class PreviewFileThumbnailResource(BasePreviewFileThumbnailResource):
+
     def __init__(self):
         BasePreviewPictureResource.__init__(self, "thumbnails")
 
@@ -759,31 +1029,48 @@ class PreviewFilePreviewResource(BasePreviewPictureResource):
         BasePreviewPictureResource.__init__(self, "previews")
 
 
-class PreviewFileThumbnailSquareResource(BasePreviewPictureResource):
+class PreviewFileThumbnailSquareResource(BasePreviewFileThumbnailResource):
     def __init__(self):
         BasePreviewPictureResource.__init__(self, "thumbnails-square")
 
 
-class PreviewFileOriginalResource(BasePreviewPictureResource):
+class PreviewFileOriginalResource(BasePreviewFileThumbnailResource):
     def __init__(self):
         BasePreviewPictureResource.__init__(self, "original")
 
 
-class BaseCreatePictureResource(Resource):
+class BaseThumbnailResource(Resource):
     """
-    Base class to create a thumbnail.
+    Base class to post and get a thumbnail.
     """
 
-    def __init__(self, data_type, size=thumbnail_utils.RECTANGLE_SIZE):
+    def __init__(
+        self,
+        data_type,
+        get_model_func,
+        update_model_func,
+        size=thumbnail_utils.RECTANGLE_SIZE,
+    ):
         Resource.__init__(self)
         self.data_type = data_type
+        self.get_model_func = get_model_func
+        self.update_model_func = update_model_func
         self.size = size
+        self.model = None
+        self.last_modified = None
 
-    def check_permissions(self, instance_id):
+    def is_exist(self, instance_id):
+        self.model = self.get_model_func(instance_id)
+
+    def check_allowed_to_post(self, instance_id):
         permissions.check_admin_permissions()
 
+    def check_allowed_to_get(self, instance_id):
+        if not self.model["has_avatar"]:
+            raise NotFound
+
     def prepare_creation(self, instance_id):
-        pass
+        self.model = self.update_model_func(instance_id, {"has_avatar": True})
 
     def emit_event(self, instance_id):
         model_name = self.data_type[:-1]
@@ -820,10 +1107,9 @@ class BaseCreatePictureResource(Resource):
             404:
                 description: Cannot found related object.
         """
-        if not self.is_exist(instance_id):
-            abort(404)
+        self.is_exist(instance_id)
+        self.check_allowed_to_post(instance_id)
 
-        self.check_permissions(instance_id)
         self.prepare_creation(instance_id)
 
         tmp_folder = config.TMP_DIR
@@ -846,18 +1132,6 @@ class BaseCreatePictureResource(Resource):
         self.emit_event(instance_id)
         return {"thumbnail_path": thumbnail_url_path}, 201
 
-
-class BasePictureResource(Resource):
-    """
-    Base resource to download a thumbnail.
-    """
-
-    def is_exist(self, instance_id):
-        return False
-
-    def is_allowed(self, instance_id):
-        return True
-
     @jwt_required()
     def get(self, instance_id):
         """
@@ -880,14 +1154,17 @@ class BasePictureResource(Resource):
             404:
                 description: Object instance not found
         """
-        if not self.is_exist(instance_id):
-            abort(404)
-
-        if not self.is_allowed(instance_id):
-            abort(403)
+        self.is_exist(instance_id)
+        self.check_allowed_to_get(instance_id)
 
         try:
-            return send_picture_file("thumbnails", instance_id)
+            return send_picture_file(
+                "thumbnails",
+                instance_id,
+                last_modified=date_helpers.get_datetime_from_string(
+                    self.model["updated_at"]
+                ),
+            )
         except FileNotFound:
             current_app.logger.error(
                 "Thumbnail file was not found for: %s" % instance_id
@@ -900,114 +1177,71 @@ class BasePictureResource(Resource):
             abort(404)
 
 
-class CreatePersonThumbnailResource(BaseCreatePictureResource):
+class PersonThumbnailResource(BaseThumbnailResource):
+
     def __init__(self):
-        BaseCreatePictureResource.__init__(
-            self, "persons", thumbnail_utils.BIG_SQUARE_SIZE
+        BaseThumbnailResource.__init__(
+            self,
+            "persons",
+            persons_service.get_person,
+            persons_service.update_person,
+            thumbnail_utils.BIG_SQUARE_SIZE,
         )
 
-    def is_exist(self, person_id):
-        return persons_service.get_person(person_id) is not None
-
-    def check_permissions(self, instance_id):
+    def check_allowed_to_post(self, instance_id):
         is_current_user = (
-            persons_service.get_current_user()["id"] != instance_id
+            persons_service.get_current_user()["id"] == instance_id
         )
-        if is_current_user and not permissions.has_admin_permissions():
+        if not is_current_user and not permissions.has_admin_permissions():
             raise permissions.PermissionDenied
 
     def prepare_creation(self, instance_id):
-        return persons_service.update_person(instance_id, {"has_avatar": True})
+        self.model = self.update_model_func(
+            instance_id, {"has_avatar": True}, bypass_protected_accounts=True
+        )
+
 
+class CreatePersonThumbnailResource(PersonThumbnailResource):
+    pass
 
-class PersonThumbnailResource(BasePictureResource):
-    def is_exist(self, person_id):
-        person = persons_service.get_person(person_id)
-        return person is not None and person["has_avatar"]
 
+class OrganisationThumbnailResource(BaseThumbnailResource):
 
-class CreateOrganisationThumbnailResource(BaseCreatePictureResource):
     def __init__(self):
-        BaseCreatePictureResource.__init__(
-            self, "organisations", thumbnail_utils.BIG_SQUARE_SIZE
+        BaseThumbnailResource.__init__(
+            self,
+            "organisations",
+            persons_service.get_organisation,
+            persons_service.update_organisation,
+            thumbnail_utils.BIG_SQUARE_SIZE,
         )
 
     def is_exist(self, organisation_id):
-        return True
+        self.model = persons_service.get_organisation()
 
-    def check_permissions(self, organisation_id):
-        if not permissions.has_admin_permissions():
-            raise permissions.PermissionDenied
 
-    def prepare_creation(self, organisation_id):
-        return persons_service.update_organisation(
-            organisation_id, {"has_avatar": True}
-        )
+class CreateOrganisationThumbnailResource(OrganisationThumbnailResource):
+    pass
 
 
-class OrganisationThumbnailResource(BasePictureResource):
-    def is_exist(self, organisation_id):
-        return True
-
-
-class CreateProjectThumbnailResource(BaseCreatePictureResource):
+class ProjectThumbnailResource(BaseThumbnailResource):
     def __init__(self):
-        BaseCreatePictureResource.__init__(
-            self, "projects", thumbnail_utils.SQUARE_SIZE
-        )
-
-    def is_exist(self, project_id):
-        return projects_service.get_project(project_id) is not None
-
-    def prepare_creation(self, instance_id):
-        return projects_service.update_project(
-            instance_id, {"has_avatar": True}
+        BaseThumbnailResource.__init__(
+            self,
+            "projects",
+            projects_service.get_project,
+            projects_service.update_project,
+            thumbnail_utils.BIG_SQUARE_SIZE,
         )
 
+    def check_allowed_to_get(self, instance_id):
+        super().check_allowed_to_get(instance_id)
+        if not permissions.has_manager_permissions():
+            user_service.check_project_access(instance_id)
 
-class ProjectThumbnailResource(BasePictureResource):
-    def is_exist(self, project_id):
-        return projects_service.get_project(project_id) is not None
 
-    def is_allowed(self, project_id):
-        try:
-            user_service.check_project_access(project_id)
-            return True
-        except permissions.PermissionDenied:
-            return False
-
-
-class LegacySetMainPreviewResource(Resource):
-    @jwt_required()
-    def put(self, entity_id, preview_file_id):
-        """
-        Set main preview to given file.
-        ---
-        tags:
-          - Previews
-        parameters:
-          - in: path
-            name: entity_id
-            required: True
-            type: string
-            format: UUID
-            x-example: a24a6ea4-ce75-4665-a070-57453082c25
-          - in: path
-            name: preview_file_id
-            required: True
-            type: string
-            format: UUID
-            x-example: a24a6ea4-ce75-4665-a070-57453082c25
-        responses:
-            200:
-                description: Main preview set
-        """
-        preview_file = files_service.get_preview_file(preview_file_id)
-        task = tasks_service.get_task(preview_file["task_id"])
-        user_service.check_project_access(task["project_id"])
-        return entities_service.update_entity_preview(
-            entity_id, preview_file_id
-        )
+class CreateProjectThumbnailResource(ProjectThumbnailResource):
+    pass
 
 
 class SetMainPreviewResource(Resource, ArgsMixin):
@@ -1043,19 +1277,17 @@ class SetMainPreviewResource(Resource, ArgsMixin):
         user_service.check_entity_access(task["entity_id"])
         if frame_number is not None:
             if preview_file["extension"] != "mp4":
-                raise ArgumentsException(
+                raise WrongParameterException(
                     "Can't use a given frame on non movie preview"
                 )
             preview_files_service.replace_extracted_frame_for_preview_file(
                 preview_file, frame_number
             )
-        asset = entities_service.update_entity_preview(
+        entity = entities_service.update_entity_preview(
             task["entity_id"],
             preview_file_id,
         )
-        assets_service.clear_asset_cache(asset["id"])
-        shots_service.clear_shot_cache(asset["id"])
-        return asset
+        return entity
 
 
 class UpdatePreviewPositionResource(Resource, ArgsMixin):
@@ -1084,9 +1316,7 @@ class UpdatePreviewPositionResource(Resource, ArgsMixin):
         """
         args = self.get_args([{"name": "position", "default": 0, "type": int}])
         preview_file = files_service.get_preview_file(preview_file_id)
-        task = tasks_service.get_task(preview_file["task_id"])
-        user_service.check_manager_project_access(task["project_id"])
-        user_service.check_entity_access(task["entity_id"])
+        user_service.check_task_access(preview_file["task_id"])
         return preview_files_service.update_preview_file_position(
             preview_file_id, args["position"]
         )
@@ -1236,9 +1466,7 @@ class ExtractTileFromPreview(Resource):
     @jwt_required()
     def get(self, preview_file_id):
         preview_file = files_service.get_preview_file(preview_file_id)
-        task = tasks_service.get_task(preview_file["task_id"])
-        user_service.check_manager_project_access(task["project_id"])
-        user_service.check_entity_access(task["entity_id"])
+        user_service.check_task_access(preview_file["task_id"])
         extracted_tile_path = (
             preview_files_service.extract_tile_from_preview_file(preview_file)
         )
@@ -1320,7 +1548,9 @@ class CreatePreviewBackgroundFileResource(Resource):
             current_app.logger.info(
                 f"Wrong file format, extension: {extension}"
             )
-            deletion_service.remove_preview_background_file_by_id(instance_id)
+            deletion_service.remove_preview_background_file_by_id(
+                instance_id, force=True
+            )
             abort(400, f"Wrong file format, extension: {extension}")
 
     def check_permissions(self, instance_id):
@@ -1367,7 +1597,9 @@ class CreatePreviewBackgroundFileResource(Resource):
             current_app.logger.error(
                 f"Error while saving preview background file and thumbnail: {instance_id}"
             )
-            deletion_service.remove_preview_background_file_by_id(instance_id)
+            deletion_service.remove_preview_background_file_by_id(
+                instance_id, force=True
+            )
             abort(
                 400,
                 f"Error while saving preview background file and thumbnail: {instance_id}",
@@ -1443,6 +1675,9 @@ class PreviewBackgroundFileResource(Resource):
                 instance_id,
                 extension=extension,
                 download_name=f"{preview_background_file['original_name']}.{extension}",
+                last_modified=date_helpers.get_datetime_from_string(
+                    preview_background_file["updated_at"]
+                ),
             )
         except FileNotFound:
             current_app.logger.error(
@@ -1451,11 +1686,17 @@ class PreviewBackgroundFileResource(Resource):
             raise PreviewBackgroundFileNotFoundException
 
 
-class PreviewBackgroundFileThumbnailResource(BasePictureResource):
-    def is_exist(self, preview_background_file_id):
-        return (
-            files_service.get_preview_background_file(
-                preview_background_file_id
-            )
-            is not None
+class PreviewBackgroundFileThumbnailResource(BaseThumbnailResource):
+    def __init__(self):
+        BaseThumbnailResource.__init__(
+            self,
+            "preview-backgrounds",
+            files_service.get_preview_background_file,
+            files_service.update_preview_background_file,
         )
+
+    def check_allowed_to_get(self, preview_background_file_id):
+        return True
+
+    def post(self, preview_background_file_id):
+        raise AttributeError("Method not allowed")