Merge branch '490-pizza-api' into 'master'

Added pizza API

Closes #490

See merge request !575

website/pizzas/api/serializers.py

+from rest_framework import serializers
+
+from pizzas.models import Product, PizzaEvent, Order
+
+
+class PizzaSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = Product
+        fields = ('pk', 'name', 'description', 'price', 'available')
+
+
+class PizzaEventSerializer(serializers.ModelSerializer):
+
+    event = serializers.PrimaryKeyRelatedField(read_only=True)
+
+    class Meta:
+        model = PizzaEvent
+        fields = ('start', 'end', 'event', 'title')
+
+
+class OrderSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = Order
+        fields = ('pk', 'paid', 'product', 'name', 'member')
+        read_only_fields = ('pk', 'paid', 'name', 'member')
+
+
+class AdminOrderSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = Order
+        fields = ('pk', 'paid', 'product', 'name', 'member')

website/pizzas/api/urls.py

+from rest_framework import routers
+
+from pizzas.api import viewsets
+
+router = routers.SimpleRouter()
+router.register(r'pizzas', viewsets.PizzaViewset)
+router.register(r'pizzas/orders', viewsets.OrderViewset)
+urlpatterns = router.urls

website/pizzas/api/viewsets.py

+from django.shortcuts import get_object_or_404
+from django.db import IntegrityError
+
+from rest_framework import permissions
+from rest_framework.viewsets import GenericViewSet, ModelViewSet
+from rest_framework.mixins import ListModelMixin
+from rest_framework.decorators import list_route
+from rest_framework.response import Response
+from rest_framework.exceptions import (ValidationError, NotFound,
+                                       PermissionDenied)
+
+from pizzas.models import Product, PizzaEvent, Order
+from pizzas.api import serializers
+
+
+class PizzaViewset(GenericViewSet, ListModelMixin):
+    queryset = Product.objects.filter(available=True)
+    permission_classes = (permissions.IsAuthenticated,)
+    serializer_class = serializers.PizzaSerializer
+
+    def list(self, request, *args, **kwargs):
+        if (PizzaEvent.current() or
+                request.user.has_perm('pizzas.change_product')):
+            return super().list(request, *args, **kwargs)
+        raise PermissionDenied
+
+    @list_route()
+    def event(self, request):
+        event = PizzaEvent.current()
+
+        if event:
+            serializer = serializers.PizzaEventSerializer(event)
+            return Response(serializer.data)
+
+        raise NotFound
+
+
+class OrderViewset(ModelViewSet):
+    permission_classes = (permissions.IsAuthenticated,)
+    queryset = Order.objects.all()
+
+    def get_queryset(self):
+        event = PizzaEvent.current()
+        if self.request.user.has_perm('pizzas.change_order'):
+            return Order.objects.filter(pizza_event=event)
+        if self.action == 'update':
+            if not event or event.has_ended:
+                return Order.objects.none()
+
+            return Order.objects.filter(member=self.request.user.member,
+                                        paid=False,
+                                        pizza_event=event)
+        return Order.objects.filter(member=self.request.user.member,
+                                    pizza_event=event)
+
+    def get_serializer_class(self):
+        if self.request.user.has_perm('pizzas.change_order'):
+            return serializers.AdminOrderSerializer
+        return serializers.OrderSerializer
+
+    def get_object(self):
+        if self.kwargs[self.lookup_field] == 'me':
+            order = get_object_or_404(self.get_queryset(),
+                                      member=self.request.user.member,
+                                      pizza_event=PizzaEvent.current())
+            self.check_object_permissions(self.request, order)
+            return order
+        return super().get_object()
+
+    def perform_create(self, serializer):
+        try:
+            if serializer.validated_data.get('name'):
+                serializer.save(pizza_event=PizzaEvent.current())
+            else:
+                serializer.save(member=self.request.user.member,
+                                pizza_event=PizzaEvent.current())
+        except IntegrityError:
+            raise ValidationError('Something went wrong when saving the order')

website/thaliawebsite/urls.py

@@ -106,6 +106,7 @@ urlpatterns = [
             url(r'^', include('members.api.urls')),
             url(r'^', include('partners.api.urls')),
             url(r'^', include('mailinglists.api.urls')),
+            url(r'^', include('pizzas.api.urls')),
         ], namespace='v1')),
     ])),
     url(r'^education/', include('education.urls')),