Expose granular permissions to frontend.

Author: rtibbles

kolibri/auth/api.py

@@ -228,7 +228,8 @@ def get_session(self, request):
         session = {'id': 'current',
                    'username': user.username,
                    'full_name': user.full_name,
-                   'user_id': user.id}
+                   'user_id': user.id,
+                   'can_manage_content': user.can_manage_content}
         roles = Role.objects.filter(user_id=user.id)
         if len(roles) is not 0 or user.is_superuser:
             session.update({'facility_id': user.facility_id,

kolibri/auth/models.py

@@ -221,6 +221,8 @@ class Meta:
     is_superuser = False
     is_facility_user = False
 
+    can_manage_content = False
+
     def get_short_name(self):
         return self.full_name.split(' ', 1)[0]
 
@@ -478,13 +480,20 @@ def calculate_partition(self):
     def infer_dataset(self, *args, **kwargs):
         return self.facility.dataset
 
-    @property
-    def is_superuser(self):
+    def get_permission(self, permission):
         try:
-            return self.devicepermissions.is_superuser
+            return getattr(self.devicepermissions, 'is_superuser') or getattr(self.devicepermissions, permission)
         except ObjectDoesNotExist:
             return False
 
+    @property
+    def can_manage_content(self):
+        return self.get_permission('can_manage_content')
+
+    @property
+    def is_superuser(self):
+        return self.get_permission('is_superuser')
+
     @property
     def is_staff(self):
         return self.is_superuser

kolibri/core/assets/src/state/actions.js

@@ -98,6 +98,7 @@ function _sessionState(data) {
     facility_id: data.facility_id,
     kind: data.kind,
     error: data.error,
+    can_manage_content: data.can_manage_content,
   };
   return state;
 }

kolibri/core/assets/src/state/store.js

@@ -7,21 +7,24 @@ const baseLoggingState = {
   attempt: {},
 };
 
+const baseSessionState = {
+  id: undefined,
+  username: '',
+  full_name: '',
+  user_id: undefined,
+  facility_id: undefined,
+  kind: [UserKinds.ANONYMOUS],
+  can_manage_content: false,
+};
+
 // core state is namespaced, and merged with a particular app's state
 const initialState = {
   core: {
     error: '',
     loading: true,
     title: '',
     pageSessionId: 0,
-    session: {
-      id: undefined,
-      username: '',
-      full_name: '',
-      user_id: undefined,
-      facility_id: undefined,
-      kind: [UserKinds.ANONYMOUS],
-    },
+    session: baseSessionState,
     loginError: null,
     logging: baseLoggingState,
     totalProgress: null,
@@ -36,7 +39,7 @@ const initialState = {
 
 const mutations = {
   CORE_SET_SESSION(state, value) {
-    state.core.session = value;
+    Object.assign(state.core.session, value);
   },
   CORE_SET_FACILITY_CONFIG(state, facilityConfig) {
     state.core.facilityConfig = facilityConfig;
@@ -49,14 +52,7 @@ const mutations = {
     state.core.loginError = value;
   },
   CORE_CLEAR_SESSION(state) {
-    state.core.session = {
-      id: undefined,
-      username: '',
-      full_name: '',
-      user_id: undefined,
-      facility_id: undefined,
-      kind: [UserKinds.ANONYMOUS],
-    };
+    Object.assign(state.core.session, baseSessionState);
   },
   CORE_SET_PAGE_LOADING(state, value) {
     const update = { loading: value };