Checking permission of tweaked direct-foreign-keys about django-guardian HOT 3 OPEN

def filter_auth_user_deployments(user, inputs):
    # init empty list
    result_list = []

    deployments_with_permission = auth_user_deployments(user)

    # filter deployments with permission
    for input in inputs:
        if input in deployments_with_permission:
            result_list.append(input)

    return result_list

# project permission managament
def auth_user_projects(user):
    ''' returns a queryset of projects allowed for auth user '''
    # init an empty project list
    project_list = []

    # get checker
    checker = ObjectPermissionChecker(user)

    # get all projects
    projects = Project.objects.all()
    # prefetch the permissions
    checker.prefetch_perms(projects)

    # scan all projects
    for project in projects:
        # if user has permission to this project
        if checker.has_perm('software.view_project', project):
            # add to list
            project_list.append(project.pk)
    
    # get all deployments
    deployments = Deployment.objects.all()
    # prefetch the permissions
    checker.prefetch_perms(deployments)

    # scan all deployments
    for deployment in deployments:
        # if user has permission to a deployment of a project
        if checker.has_perm('software.view_deployment', deployment):
            # add to project list
            if deployment.project.pk not in project_list:
                project_list.append(deployment.project.pk)

    # filter by a variable captured from url, for example
    return projects.filter(pk__in=project_list)

# deployment permission managament
def auth_user_deployments(user):
    ''' returns a queryset of deployments allowed for auth user  '''
    # init an empty deployment list
    deployment_list = []

    # get checker
    checker = ObjectPermissionChecker(user)

    # init empty permission list of structs:
    # {'project':<title>, 'codename':<perm_codename>, 'type':<name>}
    auth_user_projects_list = []

    # check user permission
    user_permission = ProjectUserObjectPermission.objects.filter(user=user)
    for values in user_permission.values():
        project = Project.objects.get(id=values['content_object_id'])
        perm_codename = Permission.objects.get(id=values['permission_id']).codename
        type = DeploymentType.objects.get(id=values['type_id'])
        add_struct = {'project':project.title, 'codename':perm_codename, 'type':type.name}
        # add
        auth_user_projects_list.append(add_struct)

    # check group permission

    # get groups
    groups = user.groups.all()

    for group in groups:
        # check group permission
        group_permission = ProjectGroupObjectPermission.objects.filter(group=group)
        for values in group_permission.values():
            project = Project.objects.get(id=values['content_object_id'])
            perm_codename = Permission.objects.get(id=values['permission_id']).codename
            type = DeploymentType.objects.get(id=values['type_id'])
            add_struct = {'project':project.title, 'codename':perm_codename, 'type':type.name}
            # add
            auth_user_projects_list.append(add_struct)

    # get all deployments
    deployments = Deployment.objects.all()
    # Prefetch the permissions
    checker.prefetch_perms(deployments)
    
    # scan all deployments
    for deployment in deployments:      
        # if user has permission to this deployment
        if checker.has_perm('software.view_deployment', deployment):
            # add to list
            deployment_list.append(deployment.pk)
        # if user has permission to this project
        else:
            for auth_user_projects in auth_user_projects_list:
                if auth_user_projects['project'] == deployment.project.title and auth_user_projects['codename'] == 'view_project' and auth_user_projects['type'] == deployment.type.name:
                    deployment_list.append(deployment.pk)
                    break

    # filter by a variable captured from url, for example
    return deployments.filter(pk__in=deployment_list)```