Add is_locked field on the Product model #310

Signed-off-by: tdruez <[email protected]>

Author: tdruez

dje/tests/testfiles/test_dataset_pp_only.json

@@ -94,6 +94,7 @@
     "notice_text": "Starship Widget Framework (SWF) \nis an adaptation of the open source\nOZONE Widget Framework (OWF)\n\nPortions of this software were developed under contract to the U.S. Government, and are made available pursuant to the DFARS clauses cited below.\n\nCopyright 2009-2012, Next Century Corporation.\nThe U.S. Government has Unlimited Rights in this computer software pursuant to\nthe clause DFARS 252.227-7014 of contract no. H98230-07-C-0614. Any\nreproduction of this computer software, or portions thereof, marked with this\nlegend must also reproduce these markings.\n\nCopyright 2009-2010, Texeltek Inc.\nThe U.S. Government has Unlimited Rights in this computer software pursuant to\nthe clause DFARS 252.227-7014 of contract no. H98230-07-C-0046. Any\nreproduction of this computer software, or portions thereof, marked with this\nlegend must also reproduce these markings.\n\nThis product further may include software developed by other individuals, entities, or agencies.  These groups have granted rights to the OWFGOSS Board to apply that code in the OWF or Marketplace code baselines, without further claim or copyright.\n\nThe product further references the following libraries or capabilities which are NOT included as part of this copyright statement, and are hereby listed with their license terms.\n* Ext JS, developed by Sencha, licensed under GNU General Public License, Version 3, http://www.gnu.org/licenses/gpl.html \n* Grails and its supporting capabilities, including Groovy, Hibernate, and Spring.  Available at grails.org, licensed Apache License, Version 2.0, http://grails.org/License\n* YUI Compressor Javascript/CSS compressor , http://yuilibrary.com/license/ (based on BSD license)\n* Dojo cross-domain library, Dojo BSD License, http://dojotoolkit.org/license\n* Shindig messaging library, http://shindig.apache.org/, Apache License, Version 2.0, http://www.apache.org/licenses/\n* JQuery Ajax/eventing library, http://jquery.com, based on MIT License, https://raw.github.com/jquery/jquery/master/MIT-LICENSE.txt\n* Spring Security jars, licensed under Apache License, Version 2, http://www.apache.org/licenses/ \n* log4javascript logging library, http://log4javascript.org,  Apache License, Version 2.0, http://www.apache.org/licenses/\n* stubconsole logging utility, http://getfirebug.com/firebug/firebugx.js, Firebug BSD License, http://fbug.googlecode.com/svn/trunk/license.txt\n* UXMedia, Ext Flash / Flex components, see http://code.google.com/p/uxmedia.  GNU General Public License, Version 3, http://www.gnu.org/licenses/gpl.html \n",
     "license_expression": "commercial-option",
     "is_active": true,
+    "is_locked": false,
     "configuration_status": [
       "nexB",
       "addd9c5d-a5ec-48ec-a565-ddb81092f49d"

product_portfolio/admin.py

@@ -317,6 +317,7 @@ class ProductAdmin(
         AsLink("owner"),
         AsJoinList("keywords", "<br>", short_description="Keywords"),
         "is_active",
+        "is_locked",
         "configuration_status",
         "primary_language",
         "contact",
@@ -332,6 +333,7 @@ class ProductAdmin(
         ReportingQueryListFilter,
         ("configuration_status", LimitToDataspaceListFilter),
         "is_active",
+        "is_locked",
     )
     search_fields = (
         "name",
@@ -364,6 +366,7 @@ class ProductAdmin(
                     "primary_language",
                     "admin_notes",
                     "is_active",
+                    "is_locked",
                     "configuration_status",
                     "contact",
                     "vulnerabilities_risk_threshold",

product_portfolio/api.py

@@ -119,6 +119,7 @@ class Meta:
             "name",
             "version",
             "owner",
+            "is_locked",
             "configuration_status",
             "license_expression",
             "licenses",

product_portfolio/filters.py

@@ -126,6 +126,7 @@ class Meta:
             "primary_language",
             "configuration_status",
             "keywords",
+            "is_locked",
         ]
 
 

product_portfolio/forms.py

@@ -123,6 +123,7 @@ class Meta:
             "homepage_url",
             "primary_language",
             "is_active",
+            "is_locked",
             "configuration_status",
             "contact",
             "keywords",
@@ -177,7 +178,7 @@ def helper(self):
                 Group("description", "keywords"),
                 Group("primary_language", "homepage_url", "contact"),
                 HTML("<hr>"),
-                Group("is_active", "configuration_status", "release_date"),
+                Group("is_active", "is_locked", "configuration_status", "release_date"),
                 HTML("<hr>"),
                 Group("vulnerabilities_risk_threshold", HTML(""), HTML("")),
                 HTML("<hr>"),
@@ -249,6 +250,8 @@ class Meta:
             "homepage_url",
             "primary_language",
             "admin_notes",
+            "is_active",
+            "is_locked",
             "configuration_status",
             "contact",
             "vcs_url",

product_portfolio/migrations/0013_product_is_locked_and_more.py

@@ -0,0 +1,30 @@
+# Generated by Django 5.1.9 on 2025-05-30 07:11
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('component_catalog', '0011_alter_component_owner'),
+        ('product_portfolio', '0012_alter_scancodeproject_status_and_more'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='product',
+            name='is_locked',
+            field=models.BooleanField(db_index=True, default=False, help_text='Marks this product vertsion as read-only, preventing any modifications to its inventory.', verbose_name='Locked'),
+        ),
+        migrations.AlterField(
+            model_name='productdependency',
+            name='for_package',
+            field=models.ForeignKey(blank=True, help_text='The package that declares this dependency.', null=True, on_delete=django.db.models.deletion.CASCADE, related_name='declared_dependencies', to='component_catalog.package'),
+        ),
+        migrations.AlterField(
+            model_name='productdependency',
+            name='resolved_to_package',
+            field=models.ForeignKey(blank=True, help_text='The resolved package for this dependency. If empty, it indicates the dependency is unresolved.', null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='resolved_from_dependencies', to='component_catalog.package'),
+        ),
+    ]

product_portfolio/models.py

@@ -221,6 +221,16 @@ class Product(BaseProductMixin, FieldChangesMixin, KeywordsMixin, DataspacedMode
         ),
     )
 
+    is_locked = models.BooleanField(
+        verbose_name=_("Locked"),
+        default=False,
+        db_index=True,
+        help_text=_(
+            "Marks this product vertsion as read-only, preventing any modifications to "
+            "its inventory."
+        ),
+    )
+
     configuration_status = models.ForeignKey(
         to="product_portfolio.ProductStatus",
         on_delete=models.PROTECT,