"""Space-bound navigation, folder management and trash endpoints.""" from pathlib import Path from django.conf import settings from django.core.exceptions import ValidationError from django.db import transaction from django.db.models import Sum, Count from django.utils import timezone from rest_framework.decorators import api_view from rest_framework.response import Response from .models import DriveItem, DriveSpace from .spaces import ensure_space, ensure_private_space, is_admin, resolve_space, can_write_space, can_read_space from .quotas import quota_state from .services import error, item_info, get_item, chain, readable, writable, valid_name, target_parent, descendant_files @api_view(['GET']) def me(request): space=ensure_space(request.user) private=ensure_private_space(request.user) return Response({'id':request.user.pk,'username':request.user.username, 'is_admin':is_admin(request.user),'first_name':request.user.first_name, 'last_name':request.user.last_name,'private_space_id':private.pk, 'space_id':space.pk,'can_invite':space.can_invite or is_admin(request.user)}) @api_view(['GET']) def listing(request): user=request.user view=request.query_params.get('view','files') if view not in ('files','trash'): return error('Vue inconnue.',400) q=request.query_params.get('q','').strip() parent_id=request.query_params.get('parent') parent=None # Trash is global across *readable* spaces, regardless of the selected space. # In particular another person's private space is never included, even for admin. if view=='trash': accessible=[space.pk for space in DriveSpace.objects.all() if can_read_space(user,space)] nodes=DriveItem.objects.filter(space_id__in=accessible,trashed_at__isnull=False).select_related('owner','parent','space') if q:nodes=nodes.filter(name__icontains=q) space=None else: try:space=resolve_space(user,request.query_params.get('space')) except PermissionError as ex:return error(str(ex),403) if parent_id: parent=get_item(parent_id) if not parent.is_folder or parent.space_id!=space.pk or not readable(parent,user): return error('Dossier inaccessible.',403) nodes=DriveItem.objects.filter(space=space,trashed_at__isnull=True).select_related('owner','parent','space') if q: nodes=nodes.filter(name__icontains=q) elif parent: nodes=nodes.filter(parent=parent) else: nodes=nodes.filter(parent__isnull=True) items=[] for n in nodes[:501]: if readable(n,user,allow_trashed=view=='trash'): info=item_info(n,user) if view=='trash':info['space_name']=n.space.display_name if not n.space.private_owner_id else 'Mes fichiers' items.append(info) if len(items)>=500:break trail=[] if parent: for n in reversed(chain(parent)): trail.append({'id':str(n.id),'name':n.name}) return Response({'items':items,'breadcrumb':trail,'limited':len(items)>=500, 'can_write':can_write_space(user,space) if space else False,'space_id':space.pk if space else None}) @api_view(['GET']) def stats(request): try:space=resolve_space(request.user,request.query_params.get('space')) except PermissionError as ex:return error(str(ex),403) result=DriveItem.objects.filter(space=space,trashed_at__isnull=True,is_folder=False).aggregate(count=Count('id'),total=Sum('size')) return Response({'files':result['count'] or 0,'bytes':result['total'] or 0, **quota_state(space), 'folders':DriveItem.objects.filter(space=space,is_folder=True,trashed_at__isnull=True).count(), 'shared':0}) @api_view(['POST']) def create_folder(request): try: space=resolve_space(request.user,request.data.get('space'),write=True) name=valid_name(request.data.get('name')) parent=target_parent(request.data.get('parent'),request.user,space) except ValueError as ex:return error(str(ex)) except PermissionError as ex:return error(str(ex),403) folder=DriveItem(owner=request.user,space=space,parent=parent,name=name,is_folder=True) folder.full_clean();folder.save() return Response(item_info(folder,request.user),status=201) @api_view(['PATCH']) def update_item(request,item_id): item=get_item(item_id) if not readable(item,request.user) or not writable(item,request.user): return error('Modification interdite.',403) data=request.data if 'name' in data: try:item.name=valid_name(data['name']) except ValueError as ex:return error(str(ex)) if 'is_shared' in data:return error('Le partage global est désactivé : utilise les espaces et invitations.') if 'parent' in data: try:new_parent=target_parent(data['parent'],request.user,item.space) except ValueError as ex:return error(str(ex)) except PermissionError as ex:return error(str(ex),403) if new_parent and (new_parent.id==item.id or item.id in [n.id for n in chain(new_parent)]): return error('Déplacement impossible dans un sous-dossier de cet élément.') item.parent=new_parent try:item.full_clean() except ValidationError as ex:return error(str(ex)) item.save() return Response(item_info(item,request.user)) @api_view(['POST']) def trash_item(request,item_id): item=get_item(item_id) if not readable(item,request.user) or not writable(item,request.user):return error('Accès refusé.',403) if item.trashed_at:return error('Élément déjà dans la corbeille.') item.trashed_at=timezone.now();item.save(update_fields=['trashed_at','updated_at']) return Response({'ok':True}) @api_view(['POST']) def restore_item(request,item_id): item=get_item(item_id) if not writable(item,request.user):return error('Accès refusé.',403) if not item.trashed_at:return error('Cet élément n’est pas dans la corbeille.') if item.parent and any(n.trashed_at for n in chain(item.parent)): item.parent=None item.trashed_at=None;item.save() return Response(item_info(item,request.user)) @api_view(['DELETE']) def delete_item(request,item_id): item=get_item(item_id) if not writable(item,request.user):return error('Accès refusé.',403) if not item.trashed_at:return error('Déplace d’abord cet élément dans la corbeille.') files=descendant_files(item) with transaction.atomic(): item.delete() def remove_files(): root=Path(settings.DRIVE_STORAGE_ROOT).resolve() for key in files: path=(root/key).resolve() if path.is_relative_to(root):path.unlink(missing_ok=True) transaction.on_commit(remove_files) return Response(status=204)