- Crea modelo UserProfile (OneToOne con User) con user_type: publico/user/administrator - Señal post_save que crea UserProfile automáticamente al crear User - UserSerializer.get_role() lee desde profile.user_type - Nuevos permisos: IsNotPublico, IsPublico y actualiza IsAdministrator - IsNotPublico restringe acceso a vistas de gestión (productos, clientes, ventas) - CatalogSaleView.create permite publico; otras acciones requieren IsNotPublico - UserProfile inline en admin de Usuarios - Data migration para backfill de usuarios existentes
26 lines
605 B
Python
26 lines
605 B
Python
from django.contrib.auth.models import User
|
|
from rest_framework import serializers
|
|
|
|
from .models import UserProfile
|
|
|
|
|
|
class UserSerializer(serializers.ModelSerializer):
|
|
role = serializers.SerializerMethodField()
|
|
|
|
class Meta:
|
|
model = User
|
|
fields = (
|
|
"id",
|
|
"username",
|
|
"email",
|
|
"first_name",
|
|
"last_name",
|
|
"role",
|
|
)
|
|
|
|
def get_role(self, obj):
|
|
try:
|
|
return obj.profile.user_type
|
|
except UserProfile.DoesNotExist:
|
|
return "administrator" if obj.is_staff else "user"
|