"""Administration of users and shared spaces, without access to personal files."""
from django.contrib import admin
from .models import DriveSpace, SpaceInvitation, SpaceGrant


@admin.register(DriveSpace)
class SpaceAdmin(admin.ModelAdmin):
    list_display = ('id', 'display_name', 'user', 'parent', 'can_view_parent', 'can_write_parent', 'can_invite', 'quota_bytes')
    search_fields = ('display_name', 'user__username')
    readonly_fields = ('directory_name', 'relative_path')

    def get_readonly_fields(self, request, obj=None):
        base = super().get_readonly_fields(request, obj)
        if obj and obj.private_owner_id:
            return tuple(base) + ('quota_bytes', 'parent', 'private_owner')
        return base

    def get_queryset(self, request):
        # The Django admin must never expose personal storage records.
        return super().get_queryset(request).filter(private_owner__isnull=True)

    def has_view_permission(self, request, obj=None):
        return (obj is None or not obj.private_owner_id) and super().has_view_permission(request, obj)

    def has_change_permission(self, request, obj=None):
        return (obj is None or not obj.private_owner_id) and super().has_change_permission(request, obj)

    def has_delete_permission(self, request, obj=None):
        # All deletion goes through the guarded GoodDrive endpoint to avoid
        # bypassing private-space preservation and on-disk cleanup.
        return False


@admin.register(SpaceInvitation)
class InvitationAdmin(admin.ModelAdmin):
    list_display = ('id', 'parent_space', 'created_by', 'expires_at', 'quota_bytes', 'used_at', 'revoked_at')
    readonly_fields = ('token_hash',)


@admin.register(SpaceGrant)
class SpaceGrantAdmin(admin.ModelAdmin):
    list_display = ('space', 'user', 'can_write', 'can_invite')

# DriveItem and UploadSession must NOT be exposed in the Django admin:
# they contain personal file names and private upload metadata.