Django - 同じ値へのアクセスを制限するユーザ制限

Question

現在の管理者関連に接続する予定のカレンダーがあります。管理者はカレンダーで日付を選択し、イベントが設定されるようにフォームを登録します。私は別の管理者会合でログインするときしかし、私はまだ最後の管理者からのイベントを見ることができます：

私はそれぞれ別々にそれらを維持したいです。

これらのデータは、同じassociation_idがイベントを見ることができます持っていないいない他の管理者としての私には正しいようです。

まだ初心者が正しい方法でガイドしてくれてありがとうございました。

---

models.py

class Administrator(AbstractUser): 
     # inherits the standard User-model 
     ... 
     association = models.ForeignKey(Association) 


class Event(models.Model): 
     name = models.CharField(max_length=50) 
     location = models.CharField(max_length=100) 
     start = models.DateTimeField(blank=False) 
     end = models.DateTimeField(blank=False) 
     allday = models.BooleanField() 
     description = models.TextField(max_length=200) 
     synced = models.BooleanField(default=False) 
     gid = models.CharField(default='', max_length=100) 
     association = models.ForeignKey(Association) 


class Association(models.Model): 
     asoc_name = models.CharField(max_length=50, null=True, blank=True) 

---

views.py

class calendar(ListView): 

    template_name = 'calapp/calendar.html' 

    def get_queryset(self): 
     queryset = Event.objects.filter(association=self.request.user.association) 
     return queryset 


def event_add_edit(request): 
    if request.method == 'POST': 
     res = {'success': False} 

     action = request.POST['action'] 
     name = request.POST['name'] 
     location = request.POST['location'] 
     start = request.POST['start'] 
     end = request.POST['end'] 
     allday = request.POST['allday'] == 'true' 
     description = request.POST['description'] 
     synced = request.POST['synced'] == 'true' 
     association = Association.objects.filter(asoc_name=request.user.association) 
     asoc = Association.objects.get(id=association) 

     if action == 'add': 
      Event.objects.create(
       name=name, 
       location=location, 
       start=start, 
       end=end, 
       allday=allday, 
       description=description, 
       synced=synced, 
       association=asoc 
      ) 

      res['success'] = True 
      res['message'] = 'added' 
      eid = Event.objects.latest('id').id 
      res['eid'] = eid 
      res['data'] = Event.objects.values().get(id=eid) 
     elif action == 'edit': 


      eid = request.POST['eid'] 
      event = Event.objects.get(id=eid) 
      event.name = name 
      event.location = location 
      event.start = start 
      event.end = end 
      event.allday = allday 
      event.description = description 
      event.synced = synced 
      event.save() 

      res['success'] = True 
      res['message'] = 'edited' 
      res['eid'] = eid 
      res['data'] = Event.objects.values().get(id=eid) 

     return JsonResponse(res) 
    else: 
     raise Http404 


def event_get(request, start, end): 
    res = {'success': False} 
    try: 
     datetime.strptime(start, '%Y-%m-%dT%H:%M:%S.%fZ') 
     datetime.strptime(end, '%Y-%m-%dT%H:%M:%S.%fZ') 
    except ValueError: 
     res['message'] = \ 
      'Invalid params: ISO format start end dates expected' 
     return JsonResponse(res) 
    result = Event.objects.filter(start__range=(start, 
              end)).order_by('start').values() 

    res['data'] = list(result) 
    res['success'] = True 
    return JsonResponse(res) 

---

urls.py

urlpatterns = [ 
url(r'^calendar/event/get/(?P<start>.+)/(?P<end>.+)/', views.event_get), 
url(r'^calendar/event/addedit/', views.event_add_edit), 
url(r'^calendar/', views.calendar.as_view(), name='calendar'), 

]

---

calendar.js（その一部）

上記カレンダーの画像の値は、私は、これは、現在のユーザに係る濾過取得していないの問題であってもよい疑いこの表示。

//generate event li 
getEventli: function (event) { 
    var $li = $("<li class='event-li'>"); 

    var $ename = $("<span class='event-li-name'>"); 
    $ename.text(event.name); 

    $li.append($ename); 

    var $etime = $("<span class='event-li-time'>"); 
    var start = new Date(event.start), 
     h = cal.getHourStr(start.getHours()); 

    $etime.text(h); 
    $li.append($etime); 

    // add data-eid attribute for detail show 
    $li.data("eid", event.id); 
    $li.click(cal.showDetailForm); 

    cal.eventsById[event.id].eventli.push($li); 

    return $li; 
} 

---

calendar.html

<div id="cal-content"> 
     <div id="cal-content-top"> 
      <span id="cal-content-top-month"> 
       <span class="btn-fa" id="cal-content-month-up"> 
        <i class="fa fa-chevron-up"></i> 
       </span> 
      <span class="btn-fa" id="cal-content-month-dn"> 
        <i class="fa fa-chevron-down"></i> 
       </span> 
      <span class="month-long">November</span> 
      <span class="year">2015</span> 
      </span> 
      <span id="cal-content-top-icon"> 
       <span class="btn-fa" id="btn-sync" id="icon-sync"> 
        <i class="fa fa-refresh"></i> 
       </span> 

     <div id="cal-content-grid"> 
      <div id="week-days"> 
       <ul> 
        <li class="week-day">Sunday</li> 
        <li class="week-day">Monday</li> 
        <li class="week-day selected">Tuesday</li> 
        <li class="week-day">Wednesday</li> 
        <li class="week-day">Thursday</li> 
        <li class="week-day">Friday</li> 
        <li class="week-day">Saturday</li> 
       </ul> 
      </div> 
      <div class="week-row"> 
       <ul> 
        <li class="week-row-cell disabled">1</li> 
        <li class="week-row-cell disabled">2</li> 
        <li class="week-row-cell disabled">3</li> 
        <li class="week-row-cell disabled">4</li> 
        <li class="week-row-cell">5</li> 
        <li class="week-row-cell">6</li> 
        <li class="week-row-cell last">7</li> 
       </ul> 
      </div> 
      <div class="week-row"> 
       <ul> 
        <li class="week-row-cell">1</li> 
        <li class="week-row-cell">2</li> 
        <li class="week-row-cell">3</li> 
        <li class="week-row-cell">4</li> 
        <li class="week-row-cell">5</li> 
        <li class="week-row-cell">6</li> 
        <li class="week-row-cell last">7</li> 
       </ul> 
      </div> 
      <div class="week-row"> 
       <ul> 
        <li class="week-row-cell">1</li> 
        <li class="week-row-cell">2</li> 
        <li class="week-row-cell">3</li> 
        <li class="week-row-cell selected">4</li> 
        <li class="week-row-cell">5</li> 
        <li class="week-row-cell">6</li> 
        <li class="week-row-cell last">7</li> 
       </ul> 
      </div> 
      <div class="week-row"> 
       <ul> 
        <li class="week-row-cell">1</li> 
        <li class="week-row-cell">2</li> 
        <li class="week-row-cell">3</li> 
        <li class="week-row-cell">4</li> 
        <li class="week-row-cell">5</li> 
        <li class="week-row-cell">6</li> 
        <li class="week-row-cell last">7</li> 
       </ul> 
      </div> 
      <div class="week-row"> 
       <ul> 
        <li class="week-row-cell">1</li> 
        <li class="week-row-cell">2</li> 
        <li class="week-row-cell">3</li> 
        <li class="week-row-cell">4</li> 
        <li class="week-row-cell">5</li> 
        <li class="week-row-cell">6</li> 
        <li class="week-row-cell last">7</li> 
       </ul> 
      </div> 
      <div class="week-row last"> 
       <ul> 
        <li class="week-row-cell">1</li> 
        <li class="week-row-cell">2</li> 
        <li class="week-row-cell">3</li> 
        <li class="week-row-cell">4</li> 
        <li class="week-row-cell">5</li> 
        <li class="week-row-cell">6</li> 
        <li class="week-row-cell last">7</li> 
       </ul> 
      </div> 
     </div> 
    </div> 
</div> 

---

calendar.js（ヘルプためのものであってもよい最もコード）

// object to manage calendar 

var cal = { 
    //today's date 
    currDate: new Date(), 
    //current calendar grid month date 
    gridDate: new Date(), 
    //stores event with event.id as key 
    eventsById: {}, 
    //stores current month day-cells 
    dayCells: [], 
    $weekdays: $("#week-days li.week-day"), 
    $monthLong: $(".month-long"), 
    $year: $(".year"), 
    $calThumb: $("#cal-thumb-content-grid"), 
    $calContentGrid: $("#cal-content-grid"), 
    $monthup: $("#cal-content-month-up"), 
    $monthdn: $("#cal-content-month-dn"), 


    //select cuurent date week 

    selectWeekDay: function() { 
     cal.$weekdays 
      .removeClass("selected"); 
     cal.$weekdays 
      .eq(cal.currDate.getDay()) 
      .addClass("selected"); 
    }, 

    // generate the calendar grid and thumb 

    render: function() { 
     //update grid month name and year 
     cal.$monthLong 
       .html(cal.gridDate.toLocaleDateString("en-us", { 
       month: "long" 
      })); 
     cal.$year.html(cal.gridDate.getFullYear()); 

     //remove previous days from grid and thumb grid 

     cal.dayCells = []; 
     $(".week-row").remove(); 
     $(".thumb-week-row").remove(); 

     //shift date to first cell date 

     var date = new Date(cal.gridDate.getFullYear(), cal.gridDate.getMonth(), 1); 
     date.shiftDay(-date.getDay()); 

     for (var r = 1; r <= 6; ++r) { 
      var $weekrow = $("<div class='week-row'><ul></ul></div>"), 
       $weekrowul = $weekrow.find("ul:first"); 

      var $thumbweekrow = $("<div class='thumb-week-row'><ul></ul></div>"), 
       $thumbweekrowul = $thumbweekrow.find("ul:first"); 

      for (var c = 1; c <= 7; ++c) { 
       var cls = "week-row-cell", 
        thumbcls = ""; 
       if (date.getMonth() != cal.gridDate.getMonth()) { 
        cls += " disabled"; 
        thumbcls += "disabled"; 
       } 

       if (c == 7) { 
        cls += " last"; 
       } 

       if (date.toDateString() == cal.currDate.toDateString()) { 
        cls += " selected"; 
        thumbcls += " selected"; 
       } 
       // append to thumb cal and cal grid 
       $thumbweekrowul.append(cal.getThumbWeekCell(date.getDate(), thumbcls)); 
       var $dayCell = cal.getWeekCell(date, cls); 
       $weekrowul.append($dayCell); 

       if (date.getMonth() == cal.gridDate.getMonth()) 
        cal.dayCells.push($dayCell); 

       // date.shiftDay(1); 
       date.shiftDay(1); 
      } 

      if (r == 6) { 
       $weekrow.addClass("last"); 
      } 

      cal.$calContentGrid.append($weekrow); 
      cal.$calThumb.append($thumbweekrow); 
     } 

     cal.getMonthEvents(); 
    }, 

    //generate cell li of week row of calendar grid 

    getWeekCell: function (date, cls) { 
     var $li = $("<li>", { 
      class: cls 
     }); 

    var $litop = $("<div class='cell-top'>"); 

    var $dayno = $("<span class='cell-dayno'>"); 
    $dayno.text(date.getDate()); 
    $litop.append($dayno); 

    var $weather = $("<span class='cell-weather'>"); 
    $litop.append($weather); 

    var $addevent = $("<span class='btn-fa btn-add'>"); 
    $addevent.data("date", date.toISOString()); 
    $addevent.html("<i class='fa fa-calendar-plus-o'></i>"); 
    $addevent.click(cal.showAddForm); 

    $litop.append($addevent); 

    $li.append($litop); 

    var $celllist = $("<div class='cell-list'><ul></ul></div>"); 
    $li.append($celllist); 

    return $li; 
}, 

//generate cell li of thumb calendar 

getThumbWeekCell: function (dayno, cls) { 
    var $li = $("<li>", { 
     class: cls 
    }); 
    $li.html(dayno); 
    return $li; 
}, 

// get current month events form db 

getMonthEvents: function() { 
    var start = new Date(cal.gridDate.getTime()); 
    start.setDate(1); 
    var end = new Date(start.getTime()); 
    end.shiftMonth(1); 

    cal.getEvents(start, end, function (response) { 
     if (response.success) { 
      response.data.forEach(function (event) { 
       //console.log(event); 
       cal.addEventLi(event); 
      }); 

      sync.syncEvents(); 
     } 
    }) 
}, 

// gets events with start date within [start,end) 

getEvents: function (start, end, callback) { 
    if (callback === undefined) 
     return; 

    var url = "/calendar/event/get/"; 
    url += start.toISOString() + "/"; 
    url += end.toISOString() + "/"; 
    console.log(url); 

    $.get({ 
     url: url, 
     success: function (response) { 
      callback(response); 
     } 
    }) 
}, 

//generate event li 

getEventli: function (event) { 
    var $li = $("<li class='event-li'>"); 

    var $ename = $("<span class='event-li-name'>"); 
    $ename.text(event.name); 

    $li.append($ename); 

    var $etime = $("<span class='event-li-time'>"); 
    var start = new Date(event.start), 
     h = cal.getHourStr(start.getHours()); 

    $etime.text(h); 
    $li.append($etime); 

    // add data-eid attribute for detail show 
    $li.data("eid", event.id); 
    $li.click(cal.showDetailForm); 

    cal.eventsById[event.id].eventli.push($li); 

    return $li; 
}, 

//get events to fill today ul 

getTodayEvents: function() { 
    var start = new Date(cal.currDate.getTime()); 
    var end = new Date(start.getTime()); 
    end.shiftHour(5); 

    var $lis={}; 
    var $ul = cal.$todayEvents.find("ul:first"); 
    $ul.children().remove(); 
    for (var x = new Date(start.getTime()), i = 0; i < 5; ++i) { 
     var h=x.getHours(), 
      hstr = cal.getHourStr(h), 
      $li = $("<li>" + hstr + "</li>"); 

     $ul.append($li); 
     $lis[h] = $li; 

     x.shiftHour(1); 
    } 

    cal.getEvents(start, end, function (response) { 
     if (response.success) { 
      console.log("today events", response); 
      response.data.forEach(function(event){ 
       var h = new Date(event.start).getHours(); 
       $lis[h].append(" - "+event.name); 
      }) 
     } 
    }); 
}, 

//go to previous month 

prevMonth: function() { 
    cal.gridDate.shiftMonth(-1); 
    cal.render(); 
}, 

//go to next month 

nextMonth: function() { 
    cal.gridDate.shiftMonth(1); 
    cal.render(); 
}, 

$formwrappers: $(".form-wrapper"), 
$formclose: $(".form-close"), 

$addEventForm: $("#add-event-form"), 
$addEventAction: $("#add-event-action"), 
$addEventEid: $("#add-event-eid"), 
$addEventSynced: $("#add-event-synced"), 
$addEventTop: $("#add-event-top"), 
$addEventName: $("#add-event-name"), 
$addEventLocation: $("#add-event-location"), 
$addEventSdate: $("#add-event-sdate"), 
$addEventStime: $("#add-event-stime"), 
$addEventEdate: $("#add-event-edate"), 
$addEventEtime: $("#add-event-etime"), 
$addEventAllday: $("#add-event-allday"), 
$addEventDesc: $("#add-event-desc"), 

$detailEventForm: $("#detail-event-form"), 
$detailEventName: $("#detail-event-name"), 
$detailEventLocation: $("#detail-event-location"), 
$detailEventDate: $("#detail-event-date"), 
$detailEventDescription: $("#detail-event-desc"), 
$btnEdit: $("#btn-edit"), 
$btnDelete: $("#btn-delete"), 

//to show add event form 

showAddForm: function() { 
    cal.$addEventAction.val("add"); 
    cal.$addEventSynced.val("false"); 

    //init inputs 

    cal.$addEventName.val(""); 
    cal.$addEventLocation.val(""); 
    cal.$addEventAllday[0].checked = false; 
    cal.$addEventDesc.val(""); 
    var date = new Date($(this).data("date")); 
    cal.$addEventTop.text(date.toDateString()); 

    date.setHours(cal.currDate.getHours()); 
    date.setMinutes(cal.currDate.getMinutes()); 

    cal.$addEventSdate.val(date.toDateInput()); 
    cal.$addEventStime.val(date.toTimeInput()); 
    date.shiftHour(1); 
    cal.$addEventEdate.val(date.toDateInput()); 
    cal.$addEventEtime.val(date.toTimeInput()); 

    cal.$addEventForm.addClass("visible"); 
}, 

//to show details form 

showDetailForm: function() { 
    var eid = $(this).data("eid"), 
     event = cal.eventsById[eid]; 

    cal.$detailEventName.text(event.name); 
    cal.$detailEventLocation.text(event.location); 

    var date = new Date(event.start), 
     datestr = date.toTimeInput() + ", " + date.toDateString(); 
    cal.$detailEventDate.text(datestr); 

    cal.$detailEventDescription.text(event.description); 
    cal.$btnEdit.data("eid", event.id); 
    cal.$btnDelete.data("eid", event.id); 

    cal.$detailEventForm.addClass("visible"); 
}, 

//add event li 

addEventLi: function (event) { 
    cal.syncedGids[event.gid] = event.id; 
    cal.eventsById[event.id] = event; 
    cal.eventsById[event.id].eventli = []; 

    var start = new Date(event.start), 
     end = new Date(event.end); 

    if (event.allday) { 
     end.shiftDay(-1); 
    } 

    for (var d = start.getDate(); d <= end.getDate(); ++d) { 
     cal.dayCells[d - 1] 
      .find("ul:first") 
      .append(cal.getEventli(event)); 
    } 
}, 

Answer 1

たぶん私はあなたが望むものを理解していません。しかし、私はあなたのコードについて助言します。

request.user.association is asoc。

# before --------- 
association = Association.objects.filter(asoc_name=request.user.association) 
asoc = Association.objects.get(id=association) 

# after ----------- 
asoc = request.user.association 

Event.objects.create returnイベントオブジェクトです。

# before ------- 
Event.objects.create(
# omit 
) 
# omit 
eid = Event.objects.latest('id').id 
res['eid'] = eid 
res['data'] = Event.objects.values().get(id=eid) 

# after ------- 
event = Event.objects.create(
# omit 
) 
# omit 
res['eid'] = event.id 
res['data'] = event 

UPDATE

また

def event_get(request, start, end): 
    res = {'success': False} 
    try: 
     datetime.strptime(start, '%Y-%m-%dT%H:%M:%S.%fZ') 
     datetime.strptime(end, '%Y-%m-%dT%H:%M:%S.%fZ') 
    except ValueError: 
     res['message'] = \ 
      'Invalid params: ISO format start end dates expected' 
     return JsonResponse(res) 

    result = Event.objects.filter(
     association=request.user.association, # Add filter 
     start__range=(start, end) 
    ).order_by('start').values() 


    res['data'] = list(result) 
    res['success'] = True 
    return JsonResponse(res) 

を次のようにevent_getビューを変更する必要があり、あなたはlogin_requiredと、このビューを保護する必要があります。 https://docs.djangoproject.com/en/1.10/topics/auth/default/#the-login-required-decorator