Source code for dal_queryset_sequence.fields

"""Autocomplete fields for QuerySetSequence choices."""

from dal_contenttypes.fields import (
    ContentTypeModelMultipleFieldMixin,
    GenericModelMixin,
)

from django import forms
from django.contrib.contenttypes.models import ContentType

from queryset_sequence import QuerySetSequence


[docs]class QuerySetSequenceFieldMixin(object): """Base methods for QuerySetSequence fields."""
[docs] def get_queryset_for_content_type(self, content_type_id): """Return the QuerySet from the QuerySetSequence for a ctype.""" content_type = ContentType.objects.get_for_id(content_type_id) for queryset in self.queryset.query._querysets: if queryset.model.__name__ == 'QuerySequenceModel': # django-queryset-sequence 0.7 support dynamically created # QuerySequenceModel which replaces the original model when it # patches the queryset since 6394e19 model = queryset.model.__bases__[0] else: model = queryset.model if model == content_type.model_class(): return queryset
[docs] def raise_invalid_choice(self, params=None): """ Raise a ValidationError for invalid_choice. The validation error left unprecise about the exact error for security reasons, to prevent an attacker doing information gathering to reverse valid content type and object ids. """ raise forms.ValidationError( self.error_messages['invalid_choice'], code='invalid_choice', params=params, )
[docs] def get_content_type_id_object_id(self, value): """Return a tuple of ctype id, object id for value.""" return value.split('-', 1)
[docs]class QuerySetSequenceModelField(GenericModelMixin, QuerySetSequenceFieldMixin, forms.ModelChoiceField): """Replacement for ModelChoiceField supporting QuerySetSequence choices."""
[docs] def to_python(self, value): """ Given a string like '3-5', return the model of ctype #3 and pk 5. Note that in the case of ModelChoiceField, to_python is also in charge of security, it's important to get the results from self.queryset. """ if not value: return value content_type_id, object_id = self.get_content_type_id_object_id(value) queryset = self.get_queryset_for_content_type(content_type_id) if queryset is None: self.raise_invalid_choice() try: return queryset.get(pk=object_id) except queryset.model.DoesNotExist: self.raise_invalid_choice()
[docs]class QuerySetSequenceModelMultipleField(ContentTypeModelMultipleFieldMixin, QuerySetSequenceFieldMixin, forms.ModelMultipleChoiceField): """ModelMultipleChoiceField with support for QuerySetSequence choices.""" def _deduplicate_values(self, value): # deduplicate given values to avoid creating many querysets or # requiring the database backend deduplicate efficiently. try: return frozenset(value) except TypeError: # list of lists isn't hashable, for example raise forms.ValidationError( self.error_messages['list'], code='list', ) def _get_ctype_objects(self, values): pks = {} for val in values: content_type_id, object_id = self.get_content_type_id_object_id( val) pks.setdefault(content_type_id, []) pks[content_type_id].append(object_id) return pks def _get_queryset_for_pks(self, pks): querysets = [] for content_type_id, object_ids in pks.items(): queryset = self.get_queryset_for_content_type(content_type_id) if queryset is None: self.raise_invalid_choice( params=dict( value='%s-%s' % (content_type_id, object_ids[0]) ) ) querysets.append(queryset.filter(pk__in=object_ids)) return QuerySetSequence(*querysets) def _check_values(self, value): values = self._deduplicate_values(value) pks = self._get_ctype_objects(values) queryset = self._get_queryset_for_pks(pks) fetched_values = [ '%s-%s' % (ContentType.objects.get_for_model(o).pk, o.pk) for o in queryset ] for val in value: if val not in fetched_values: self.raise_invalid_choice(params={'value': val}) return queryset