Day 8: Product detail view, List view and Product rating and Review code

PTHARRISH · PTHARRISH · commit 8ec274c7c77a · 2025-12-03T18:19:08.000+05:30
diff --git a/api/urls.py b/api/urls.py
@@ -5,6 +5,9 @@
     AdminRegisterView,
     AdminUserDetailView,
     LoginView,
+    ProductDetailView,
+    ProductListView,
+    ProductReviewCreateUpdateView,
     TechnicianRegisterView,
     UserRegisterView,
 )
@@ -18,6 +21,9 @@
     ),
     path("register/admin/", AdminRegisterView.as_view(), name="admin-register"),
     path("login/", LoginView.as_view(), name="login"),
+    path("products/", ProductListView.as_view()),
+    path("products/<int:product_id>/", ProductDetailView.as_view()),
+    path("products/<int:product_id>/review/", ProductReviewCreateUpdateView.as_view()),
     path("admin/dashboard/", AdminDashboardView.as_view(), name="admin-dashboard"),
     path(
         "admin/users/<int:user_id>/",
diff --git a/users/models.py b/users/models.py
@@ -1,8 +1,17 @@
 from django.conf import settings
 from django.contrib.auth.models import AbstractUser
+from django.core.validators import MaxValueValidator, MinValueValidator
 from django.db import models
 
 
+class TimestampedModel(models.Model):
+    created_at = models.DateTimeField(auto_now_add=True)
+    updated_at = models.DateTimeField(auto_now=True)
+
+    class Meta:
+        abstract = True
+
+
 class User(AbstractUser):
     ROLE_CHOICES = [
         ("user", "User"),
@@ -22,7 +31,7 @@ def __str__(self):
         return str(self.name)
 
 
-class Profile(models.Model):
+class Profile(TimestampedModel):
     PROFILE_STATUS = [
         ("inactive", "Inactive"),
         ("pending", "Pending"),
@@ -51,14 +60,92 @@ def __str__(self):
         return str(self.user)
 
 
-class Review(models.Model):
+class Category(TimestampedModel):
+    name = models.CharField(max_length=100, unique=True)
+
+    def __str__(self):
+        return self.name
+
+
+class Brand(TimestampedModel):
+    name = models.CharField(max_length=100, unique=True)
+    category = models.ForeignKey(
+        Category,
+        on_delete=models.SET_NULL,
+        null=True,
+        blank=True,
+        related_name="brands",
+    )
+
+    def __str__(self):
+        return str(self.name)
+
+
+class Product(TimestampedModel):
+    product_name = models.CharField(max_length=255)
+    description = models.TextField(blank=True, default="")
+    price = models.DecimalField(max_digits=10, decimal_places=2)
+    tags = models.ManyToManyField(Tag, blank=True)
+    status = models.CharField(
+        choices=[("stock", "Stock"), ("out_of_stock", "Out of Stock")], max_length=20
+    )
+    technical_specifications = models.JSONField(blank=True, null=True)
+    brand = models.ForeignKey(
+        Brand,
+        on_delete=models.CASCADE,
+        null=True,
+        blank=True,
+        related_name="products",
+    )
+
+    def __str__(self):
+        return str(self.product_name)
+
+    @property
+    def average_rating(self):
+        reviews = self.reviews.all()
+        if reviews.exists():
+            return round(sum([r.rating for r in reviews]) / reviews.count(), 2)
+        return 0
+
+
+class ProductImage(models.Model):
+    product = models.ForeignKey(
+        Product, on_delete=models.CASCADE, related_name="images"
+    )
+    image = models.ImageField(upload_to="products/gallery/")
+
+    def __str__(self):
+        return f"Image for {self.product.product_name}"
+
+
+class ProductReview(TimestampedModel):
+    product = models.ForeignKey(
+        Product, on_delete=models.CASCADE, related_name="reviews"
+    )
+    user = models.ForeignKey(
+        User, on_delete=models.CASCADE, related_name="user_reviews"
+    )
+    rating = models.PositiveIntegerField(
+        validators=[MinValueValidator(1), MaxValueValidator(5)]
+    )
+    review_text = models.TextField(blank=True)
+    image = models.ImageField(upload_to="reviews/", blank=True, null=True)
+
+    class Meta:
+        unique_together = ("user", "product")  # One review per user
+
+    def __str__(self):
+        return f"{self.user.username} - {self.product.product_name}"
+
+
+class Review(TimestampedModel):
     technician = models.ForeignKey(
         Profile, on_delete=models.CASCADE, related_name="reviews"
     )
     reviewer = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.CASCADE)
     rating = models.PositiveSmallIntegerField()
     review_text = models.TextField()
-    created_at = models.DateTimeField(auto_now_add=True)
 
     def __str__(self):
         return str(self.technician) + " - " + str(self.rating)
diff --git a/users/permissions.py b/users/permissions.py
@@ -6,5 +6,16 @@ def has_permission(self, request, view):
         return bool(
             request.user
             and request.user.is_authenticated
-            and getattr(request.user, "is_admin", False)
+            and request.user.role == "admin"
+            and request.user.is_superuser
+        )
+
+
+class TechnicianUser(BasePermission):
+    def has_permission(self, request, view):
+        return bool(
+            request.user
+            and request.user.is_authenticated
+            and request.user.role == "technician"
+            and request.user.is_staff
         )
diff --git a/users/serializers.py b/users/serializers.py
@@ -4,7 +4,15 @@
 from drf_spectacular.utils import extend_schema_field
 from rest_framework import serializers
 
-from users.models import Booking, Profile
+from users.models import (
+    Booking,
+    Brand,
+    Product,
+    ProductImage,
+    ProductReview,
+    Profile,
+    Tag,
+)
 
 User = get_user_model()
 
@@ -62,10 +70,11 @@ def validate(self, attrs):
     def create(self, validated_data):
         validated_data.pop("confirm_password")
         password = validated_data.pop("password")
-        if validated_data.get("role") == "admin":
-            validated_data["is_admin"] = True
-            # validated_data["is_superuser"] = True
         user = User(**validated_data)
+        if validated_data.get("role") == "admin":
+            user.is_superuser = True
+        if validated_data.get("role") == "technician":
+            user.is_staff = True
         user.set_password(password)
         user.save()
         return user
@@ -94,6 +103,64 @@ def update(self, instance, validated_data):
         return instance  # Login does not update objects
 
 
+class ProductImageSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = ProductImage
+        fields = ["id", "image"]
+
+
+class BrandSerializer(serializers.ModelSerializer):
+    category = serializers.StringRelatedField()
+
+    class Meta:
+        model = Brand
+        fields = ["id", "name", "category"]
+
+
+class TagSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = Tag
+        fields = ["id", "name"]
+
+
+class ProductReviewSerializer(serializers.ModelSerializer):
+    username = serializers.CharField(source="user.username", read_only=True)
+
+    class Meta:
+        model = ProductReview
+        fields = ["id", "username", "rating", "review_text", "image", "created_at"]
+        read_only_fields = ["username", "created_at"]
+
+
+class ProductSerializer(serializers.ModelSerializer):
+    brand = BrandSerializer()
+    tags = TagSerializer(many=True)
+    images = ProductImageSerializer(many=True)
+    reviews = ProductReviewSerializer(many=True, read_only=True)
+    average_rating = serializers.FloatField(read_only=True)
+    url = serializers.SerializerMethodField()
+
+    class Meta:
+        model = Product
+        fields = [
+            "id",
+            "product_name",
+            "description",
+            "price",
+            "tags",
+            "status",
+            "technical_specifications",
+            "brand",
+            "images",
+            "reviews",
+            "average_rating",
+            "url",
+        ]
+
+    def get_url(self, obj):
+        return f"/products/{obj.id}/"
+
+
 class TechnicianSummarySerializer(serializers.ModelSerializer):
     username = serializers.CharField(source="user.username")
     fullname = serializers.CharField(source="user.fullname")
diff --git a/users/views.py b/users/views.py
@@ -3,17 +3,19 @@
 from django.contrib.auth import get_user_model
 from django.db.models import Avg, Count, Max, Sum
 from rest_framework import status
-from rest_framework.permissions import AllowAny
+from rest_framework.permissions import AllowAny, IsAuthenticated
 from rest_framework.response import Response
 from rest_framework.views import APIView
 from rest_framework_simplejwt.tokens import RefreshToken
 
-from users.models import Booking, Profile
+from users.models import Booking, Product, ProductReview, Profile
 from users.permissions import AdminUser
 from users.serializers import (
     AdminUserDetailSerializer,
     BookingDetailSerializer,
     LoginSerializer,
+    ProductReviewSerializer,
+    ProductSerializer,
     RegisterSerializer,
     TechnicianSummarySerializer,
     UserBookingHistorySerializer,
@@ -171,6 +173,48 @@ def post(self, request):
         )
 
 
+class ProductListView(APIView):
+    permission_classes = [IsAuthenticated]
+
+    def get(self, request):
+        products = Product.objects.all().prefetch_related("images", "tags", "reviews")
+        serializer = ProductSerializer(products, many=True)
+        return Response(serializer.data, status=status.HTTP_200_OK)
+
+
+class ProductReviewCreateUpdateView(APIView):
+    permission_classes = [IsAuthenticated]
+
+    def post(self, request, product_id):
+        product = Product.objects.get(id=product_id)
+
+        try:
+            review = ProductReview.objects.get(product=product, user=request.user)
+            serializer = ProductReviewSerializer(
+                review, data=request.data, partial=True
+            )
+        except ProductReview.DoesNotExist:
+            serializer = ProductReviewSerializer(data=request.data)
+
+        if serializer.is_valid():
+            serializer.save(product=product, user=request.user)
+            return Response(
+                {"message": "Review submitted successfully", "data": serializer.data},
+                status=status.HTTP_200_OK,
+            )
+
+        return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
+
+
+class ProductDetailView(APIView):
+    permission_classes = [IsAuthenticated]
+
+    def get(self, request, product_id):
+        product = Product.objects.get(id=product_id)
+        serializer = ProductSerializer(product)
+        return Response(serializer.data, status=status.HTTP_200_OK)
+
+
 # Admin Views all user information including roles and technician details.
 
 
