GooDrive/backend/drive/views_items.py

"""Space-bound navigation, folder management and trash endpoints."""
from pathlib import Path
from django.conf import settings
from django.core.exceptions import ValidationError
from django.db import transaction
from django.db.models import Sum, Count
from django.utils import timezone
from rest_framework.decorators import api_view
from rest_framework.response import Response
from .models import DriveItem, DriveSpace
from .spaces import ensure_space, ensure_private_space, is_admin, resolve_space, can_write_space, can_read_space
from .quotas import quota_state
from .services import error, item_info, get_item, chain, readable, writable, valid_name, target_parent, descendant_files


@api_view(['GET'])
def me(request):
    space=ensure_space(request.user)
    private=ensure_private_space(request.user)
    return Response({'id':request.user.pk,'username':request.user.username,
                     'is_admin':is_admin(request.user),'first_name':request.user.first_name,
                     'last_name':request.user.last_name,'private_space_id':private.pk,
                     'space_id':space.pk,'can_invite':space.can_invite or is_admin(request.user)})


@api_view(['GET'])
def listing(request):
    user=request.user
    view=request.query_params.get('view','files')
    if view not in ('files','trash'):
        return error('Vue inconnue.',400)
    q=request.query_params.get('q','').strip()
    parent_id=request.query_params.get('parent')
    parent=None
    # Trash is global across *readable* spaces, regardless of the selected space.
    # In particular another person's private space is never included, even for admin.
    if view=='trash':
        accessible=[space.pk for space in DriveSpace.objects.all() if can_read_space(user,space)]
        nodes=DriveItem.objects.filter(space_id__in=accessible,trashed_at__isnull=False).select_related('owner','parent','space')
        if q:nodes=nodes.filter(name__icontains=q)
        space=None
    else:
        try:space=resolve_space(user,request.query_params.get('space'))
        except PermissionError as ex:return error(str(ex),403)
        if parent_id:
            parent=get_item(parent_id)
            if not parent.is_folder or parent.space_id!=space.pk or not readable(parent,user):
                return error('Dossier inaccessible.',403)
        nodes=DriveItem.objects.filter(space=space,trashed_at__isnull=True).select_related('owner','parent','space')
        if q:
            nodes=nodes.filter(name__icontains=q)
        elif parent:
            nodes=nodes.filter(parent=parent)
        else:
            nodes=nodes.filter(parent__isnull=True)
    items=[]
    for n in nodes[:501]:
        if readable(n,user,allow_trashed=view=='trash'):
            info=item_info(n,user)
            if view=='trash':info['space_name']=n.space.display_name if not n.space.private_owner_id else 'Mes fichiers'
            items.append(info)
        if len(items)>=500:break
    trail=[]
    if parent:
        for n in reversed(chain(parent)):
            trail.append({'id':str(n.id),'name':n.name})
    return Response({'items':items,'breadcrumb':trail,'limited':len(items)>=500,
                     'can_write':can_write_space(user,space) if space else False,'space_id':space.pk if space else None})


@api_view(['GET'])
def stats(request):
    try:space=resolve_space(request.user,request.query_params.get('space'))
    except PermissionError as ex:return error(str(ex),403)
    result=DriveItem.objects.filter(space=space,trashed_at__isnull=True,is_folder=False).aggregate(count=Count('id'),total=Sum('size'))
    return Response({'files':result['count'] or 0,'bytes':result['total'] or 0,
                     **quota_state(space),
                     'folders':DriveItem.objects.filter(space=space,is_folder=True,trashed_at__isnull=True).count(),
                     'shared':0})


@api_view(['POST'])
def create_folder(request):
    try:
        space=resolve_space(request.user,request.data.get('space'),write=True)
        name=valid_name(request.data.get('name'))
        parent=target_parent(request.data.get('parent'),request.user,space)
    except ValueError as ex:return error(str(ex))
    except PermissionError as ex:return error(str(ex),403)
    folder=DriveItem(owner=request.user,space=space,parent=parent,name=name,is_folder=True)
    folder.full_clean();folder.save()
    return Response(item_info(folder,request.user),status=201)


@api_view(['PATCH'])
def update_item(request,item_id):
    item=get_item(item_id)
    if not readable(item,request.user) or not writable(item,request.user):
        return error('Modification interdite.',403)
    data=request.data
    if 'name' in data:
        try:item.name=valid_name(data['name'])
        except ValueError as ex:return error(str(ex))
    if 'is_shared' in data:return error('Le partage global est désactivé : utilise les espaces et invitations.')
    if 'parent' in data:
        try:new_parent=target_parent(data['parent'],request.user,item.space)
        except ValueError as ex:return error(str(ex))
        except PermissionError as ex:return error(str(ex),403)
        if new_parent and (new_parent.id==item.id or item.id in [n.id for n in chain(new_parent)]):
            return error('Déplacement impossible dans un sous-dossier de cet élément.')
        item.parent=new_parent
    try:item.full_clean()
    except ValidationError as ex:return error(str(ex))
    item.save()
    return Response(item_info(item,request.user))


@api_view(['POST'])
def trash_item(request,item_id):
    item=get_item(item_id)
    if not readable(item,request.user) or not writable(item,request.user):return error('Accès refusé.',403)
    if item.trashed_at:return error('Élément déjà dans la corbeille.')
    item.trashed_at=timezone.now();item.save(update_fields=['trashed_at','updated_at'])
    return Response({'ok':True})


@api_view(['POST'])
def restore_item(request,item_id):
    item=get_item(item_id)
    if not writable(item,request.user):return error('Accès refusé.',403)
    if not item.trashed_at:return error('Cet élément n’est pas dans la corbeille.')
    if item.parent and any(n.trashed_at for n in chain(item.parent)):
        item.parent=None
    item.trashed_at=None;item.save()
    return Response(item_info(item,request.user))


@api_view(['DELETE'])
def delete_item(request,item_id):
    item=get_item(item_id)
    if not writable(item,request.user):return error('Accès refusé.',403)
    if not item.trashed_at:return error('Déplace d’abord cet élément dans la corbeille.')
    files=descendant_files(item)
    with transaction.atomic():
        item.delete()
        def remove_files():
            root=Path(settings.DRIVE_STORAGE_ROOT).resolve()
            for key in files:
                path=(root/key).resolve()
                if path.is_relative_to(root):path.unlink(missing_ok=True)
        transaction.on_commit(remove_files)
    return Response(status=204)