Merge pull request #506 from PROCOLLAB-github/dev

Изменён уровень доступа к ручку UserList

Author: Toksi86

procollab/settings.py

@@ -118,9 +118,9 @@
 MIDDLEWARE = [
     "django_prometheus.middleware.PrometheusBeforeMiddleware",
     "django.middleware.security.SecurityMiddleware",
+    "corsheaders.middleware.CorsMiddleware",
     "whitenoise.middleware.WhiteNoiseMiddleware",
     "django.contrib.sessions.middleware.SessionMiddleware",
-    "corsheaders.middleware.CorsMiddleware",
     "django.middleware.common.CommonMiddleware",
     "django.middleware.csrf.CsrfViewMiddleware",
     "django.contrib.auth.middleware.AuthenticationMiddleware",

users/serializers.py

@@ -47,7 +47,9 @@ def to_representation(self, data):
         if isinstance(data, list):
             return data
         return [
-            i.replace("'", "") for i in data.strip("][").split(",") if i.replace("'", "")
+            i.replace("'", "")
+            for i in data.strip("][").split(",")
+            if i.replace("'", "")
         ]
 
 
@@ -107,6 +109,7 @@ class Meta:
 
 class UserDataConfirmationSerializer(serializers.ModelSerializer):
     """Information about the User to add to the skill confirmation information."""
+
     v2_speciality = SpecializationSerializer()
 
     class Meta:
@@ -148,12 +151,15 @@ def to_representation(self, instance):
         """Returns correct data about user in `confirmed_by`."""
         data = super().to_representation(instance)
         data.pop("skill_to_object", None)
-        data["confirmed_by"] = UserDataConfirmationSerializer(instance.confirmed_by).data
+        data["confirmed_by"] = UserDataConfirmationSerializer(
+            instance.confirmed_by
+        ).data
         return data
 
 
 class UserApproveSkillResponse(serializers.Serializer):
     """For swagger response presentation."""
+
     confirmed_by = UserDataConfirmationSerializer(read_only=True)
 
 
@@ -173,14 +179,14 @@ class Meta:
 
     def get_approves(self, obj):
         """Adds information about confirm to the skill."""
-        confirmations = (
-            UserSkillConfirmation.objects
-            .filter(skill_to_object=obj)
-            .select_related('confirmed_by')
-        )
+        confirmations = UserSkillConfirmation.objects.filter(
+            skill_to_object=obj
+        ).select_related("confirmed_by")
         return [
             {
-                "confirmed_by": UserDataConfirmationSerializer(confirmation.confirmed_by).data,
+                "confirmed_by": UserDataConfirmationSerializer(
+                    confirmation.confirmed_by
+                ).data,
             }
             for confirmation in confirmations
         ]
@@ -300,14 +306,15 @@ def validate(self, attrs):
         completion_year = attrs.get("completion_year")
         entry_year = attrs.get("entry_year")
         if (entry_year and completion_year) and (entry_year > completion_year):
-            raise ValidationError({
-                "entry_year": constants.USER_EXPERIENCE_YEAR_VALIDATION_MESSAGE,
-            })
+            raise ValidationError(
+                {
+                    "entry_year": constants.USER_EXPERIENCE_YEAR_VALIDATION_MESSAGE,
+                }
+            )
         return attrs
 
 
 class UserEducationSerializer(UserExperienceMixin, serializers.ModelSerializer):
-
     class Meta:
         model = UserEducation
         fields = [
@@ -321,7 +328,6 @@ class Meta:
 
 
 class UserWorkExperienceSerializer(UserExperienceMixin, serializers.ModelSerializer):
-
     class Meta:
         model = UserWorkExperience
         fields = [
@@ -334,7 +340,6 @@ class Meta:
 
 
 class UserLanguagesSerializer(serializers.ModelSerializer):
-
     class Meta:
         model = UserLanguages
         fields = [
@@ -391,11 +396,9 @@ def get_projects(self, user: CustomUser):
         ).data
 
     def get_programs(self, user: CustomUser):
-        user_program_profiles = (
-            user.partner_program_profiles
-            .select_related('partner_program')
-            .filter(partner_program__draft=False)
-        )
+        user_program_profiles = user.partner_program_profiles.select_related(
+            "partner_program"
+        ).filter(partner_program__draft=False)
         return UserProgramsSerializer(
             [profile.partner_program for profile in user_program_profiles],
             context={"request": self.context.get("request"), "user": user},
@@ -523,7 +526,10 @@ def update(self, instance, validated_data):
             if attr in IMMUTABLE_FIELDS + USER_TYPE_FIELDS + RELATED_FIELDS:
                 continue
             if attr == "user_type":
-                if value == instance.user_type or value not in user_types_to_attr.keys():
+                if (
+                    value == instance.user_type
+                    or value not in user_types_to_attr.keys()
+                ):
                     continue
                 # we can't change user type to Member
                 if value == CustomUser.MEMBER:
@@ -556,13 +562,17 @@ def _update_user_education(self, instance: CustomUser, data: list[dict]) -> None
             serializer.save(user=instance)
 
     @transaction.atomic
-    def _update_user_work_experience(self, instance: CustomUser, data: list[dict]) -> None:
+    def _update_user_work_experience(
+        self, instance: CustomUser, data: list[dict]
+    ) -> None:
         """
         Update user work experience.
         `PUT`/ `PATCH` methods require full data about education.
         """
         instance.work_experience.all().delete()
-        serializer = UserWorkExperienceSerializer(data=data, many=True, context=self.context)
+        serializer = UserWorkExperienceSerializer(
+            data=data, many=True, context=self.context
+        )
         if serializer.is_valid(raise_exception=True):
             serializer.save(user=instance)
 
@@ -575,7 +585,9 @@ def _update_user_languages(self, instance: CustomUser, data: list[dict]) -> None
         # Only unique languages in profile.
         languages = [lang_data["language"] for lang_data in data]
         if len(languages) != len(set(languages)):
-            raise ValidationError({"language": constants.UNIQUE_LANGUAGES_VALIDATION_MESSAGE})
+            raise ValidationError(
+                {"language": constants.UNIQUE_LANGUAGES_VALIDATION_MESSAGE}
+            )
         # Custom validation to limit the number of languages per user to `USER_MAX_LANGUAGES_COUNT`.
         if len(languages) > constants.USER_MAX_LANGUAGES_COUNT:
             raise ValidationError(constants.COUNT_LANGUAGES_VALIDATION_MESSAGE)
@@ -591,7 +603,9 @@ def _update_user_skills(self, instance: CustomUser, data: list[int]) -> None:
         Required count of skills between 1 and `USER_MAX_SKILL_QUANTITY`.
         """
         if not (1 <= len(data) <= constants.USER_MAX_SKILL_QUANTITY):
-            raise serializers.ValidationError(constants.USER_SKILL_QUANTITY_VALIDATIONS_MESSAGE)
+            raise serializers.ValidationError(
+                constants.USER_SKILL_QUANTITY_VALIDATIONS_MESSAGE
+            )
 
         user_content_type = ContentType.objects.get_for_model(CustomUser)
 
@@ -624,7 +638,9 @@ def _update_user_skills(self, instance: CustomUser, data: list[int]) -> None:
 
     def _user_skills_quantity_limit_validation(self, instance: CustomUser) -> None:
         if instance.skills_count > constants.USER_MAX_SKILL_QUANTITY:
-            raise serializers.ValidationError(constants.USER_SKILL_QUANTITY_VALIDATIONS_MESSAGE)
+            raise serializers.ValidationError(
+                constants.USER_SKILL_QUANTITY_VALIDATIONS_MESSAGE
+            )
 
     def to_representation(self, instance) -> dict[str, Any]:
         """
@@ -734,6 +750,50 @@ class Meta:
         }
 
 
+class PublicUserSerializer(serializers.ModelSerializer):
+    firstName = serializers.CharField(source="first_name")
+    lastName = serializers.CharField(source="last_name")
+    skills = serializers.SerializerMethodField()
+    is_online = serializers.SerializerMethodField()
+
+    def get_skills(self, user: CustomUser) -> list:
+        """Возвращает список навыков без поля approves"""
+        skills = []
+        for sto in getattr(user, "prefetched_skills", []):
+            skill = sto.skill
+            skills.append(
+                {
+                    "id": skill.id,
+                    "name": skill.name,
+                    "category": {"id": skill.category.id, "name": skill.category.name},
+                }
+            )
+        return skills
+
+    def get_is_online(self, user: CustomUser) -> bool:
+        """Логика проверки онлайн-статуса"""
+        request = self.context.get("request")
+        if request and request.user.is_authenticated and request.user.id == user.id:
+            return True
+
+        cache_key = get_user_online_cache_key(user)
+        return cache.get(cache_key, False)
+
+    class Meta:
+        model = CustomUser
+        fields = [
+            "id",
+            "firstName",
+            "lastName",
+            "avatar",
+            "user_type",
+            "skills",
+            "is_online",
+            "birthday",
+            "speciality",
+        ]
+
+
 class UserFeedSerializer(serializers.ModelSerializer, SkillsSerializerMixin):
     class Meta:
         model = CustomUser

users/urls.py

@@ -5,6 +5,7 @@
     AchievementDetail,
     AchievementList,
     CurrentUser,
+    PublicUserListView,
     SpecialistsList,
     UserAdditionalRolesView,
     UserDetail,
@@ -38,6 +39,7 @@
         "specialists/", SpecialistsList.as_view()
     ),  # this url actually returns  mentors, experts and investors
     path("users/", UserList.as_view()),
+    path('public-users/', PublicUserListView.as_view(), name='public-users'),
     path("users/projects/", UserProjectsList.as_view()),
     path("users/liked/", LikedProjectList.as_view()),
     path("users/roles/", UserAdditionalRolesView.as_view()),