Method edit

app/api/projects.py:155–231

(self, request, pk=None)

    
    @action(detail=True, methods=['post'])
    def edit(self, request, pk=None):
        project = get_and_check_project(request, pk, ('change_project', ))

        try:
            with transaction.atomic():
                project.name = request.data.get('name', '')
                project.description = request.data.get('description', '')
                project.tags = TagsField().to_internal_value(parse_tags_input(request.data.get('tags', [])))
                project.save()

                form_perms = request.data.get('permissions')
                if form_perms is not None:
                    # Build perms maps (ignore owners, empty usernames). If groupname is set, it takes precedence.
                    perms_map = {}
                    group_perms_map = {}
                    for perm in form_perms:
                        if perm.get('groupname'):
                            group_perms_map[perm['groupname']] = perm['permissions']
                        elif not perm.get('owner') and perm.get('username'):
                            perms_map[perm['username']] = perm['permissions']

                    db_perms = get_users_with_perms(project, attach_perms=True, with_group_users=False)
                    
                    # Check users to remove
                    for user in db_perms:

                        # Never modify owner permissions
                        if project.owner == user:
                            continue
                        
                        if perms_map.get(user.username) is None:
                            for p in db_perms[user]:
                                remove_perm(p, user, project)
                    
                    # Check users to add/edit
                    for username in perms_map:
                        user = User.objects.get(username=username)
                        for p in ["add", "change", "delete", "view"]:
                            perm = p + "_project"

                            # Skip owners
                            if project.owner == user:
                                continue

                            # Has permission in database but not in form?
                            if user.has_perm(perm, project) and not p in perms_map[username]:
                                remove_perm(perm, user, project)
                            
                            # Has permission in form but not in database?
                            elif p in perms_map[username] and not user.has_perm(perm, project):
                                assign_perm(perm, user, project)

                    db_group_perms = get_groups_with_perms(project, attach_perms=True)

                    for group in db_group_perms:
                        if group_perms_map.get(group.name) is None:
                            for p in db_group_perms[group]:
                                remove_perm(p, group, project)