Skip to content

Permissions

hypha.apply.api.v1.review.permissions

HasReviewCreatePermission

Bases: BasePermission

Custom permission that user should have for creating review.

has_permission 

has_permission(request, view)
Source code in hypha/apply/api/v1/review/permissions.py 
 9
10
11
12
13
14
15
16
def has_permission(self, request, view):
    try:
        submission = view.get_submission_object()
    except KeyError:
        return True
    return submission.phase.permissions.can_review(
        request.user
    ) and submission.has_permission_to_review(request.user)

HasReviewEditPermission

Bases: BasePermission

Custom permission that user should have for editing review.

has_object_permission 

has_object_permission(request, view, obj)
Source code in hypha/apply/api/v1/review/permissions.py 
24
25
26
27
28
def has_object_permission(self, request, view, obj):
    return (
        request.user.has_perm("review.change_review")
        or request.user == obj.author.reviewer
    )

HasReviewDetailPermission

Bases: BasePermission

Custom permission that user should have for viewing review.

has_object_permission 

has_object_permission(request, view, obj)
Source code in hypha/apply/api/v1/review/permissions.py 
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
def has_object_permission(self, request, view, obj):
    user = request.user
    author = obj.author.reviewer
    submission = obj.submission

    if user.is_apply_staff:
        return True

    if user == author:
        return True

    if user.is_reviewer and obj.reviewer_visibility:
        return True

    if (
        user.is_community_reviewer
        and submission.community_review
        and obj.reviewer_visibility
        and submission.user != user
    ):
        return True

    return False

HasReviewDeletePermission

Bases: BasePermission

Custom permission that user should have for deleting review.

has_object_permission 

has_object_permission(request, view, obj)
Source code in hypha/apply/api/v1/review/permissions.py 
66
67
68
69
def has_object_permission(self, request, view, obj):
    return (
        request.user.has_perm("review.delete_review") or request.user == obj.author
    )

HasReviewOpinionPermission

Bases: BasePermission

Custom permission that user should have for posting opinion on a review.

has_object_permission 

has_object_permission(request, view, obj)
Source code in hypha/apply/api/v1/review/permissions.py 
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
def has_object_permission(self, request, view, obj):
    review = obj
    user = request.user
    author = review.author.reviewer
    submission = review.submission

    if user.is_apply_staff:
        return True

    if user == author:
        return False

    if user.is_reviewer and review.reviewer_visibility:
        return True

    if (
        user.is_community_reviewer
        and submission.community_review
        and review.reviewer_visibility
        and submission.user != user
    ):
        return True

    return False

HasReviewDraftPermission

Bases: BasePermission

Custom permission that user should have to access draft review.

has_object_permission 

has_object_permission(request, view, obj)
Source code in hypha/apply/api/v1/review/permissions.py 
108
109
110
111
112
113
114
115
116
117
118
def has_object_permission(self, request, view, obj):
    try:
        submission = view.get_submission_object()
    except KeyError:
        return True
    return (
        submission.can_review(request.user)
        and submission.assigned.draft_reviewed()
        .filter(reviewer=request.user)
        .exists()
    )