File size: 2,917 Bytes
b7a7f32
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
from typing import Any, List

from fastapi import APIRouter, Depends
from sqlalchemy.orm import Session

from utils import deps
from cruds import crud_department
from schemas import Department, DepartmentUpdate, Course
from models import User
from fastapi import HTTPException
from core import settings

router = APIRouter()

# get all Departments, can be called by all users (1 through 4)
@router.get("/", response_model=List[Department])
def get_department(
    db: Session = Depends(deps.get_db),
    skip: int = 0,
    limit: int = 100,
    current_user: User = Depends(deps.get_current_active_user),
) -> Any:
    department = crud_department.get_multi(db, skip=skip, limit=limit)
    return department


# create a new deparment, can be only created by admin and superadmin
@router.post("/", response_model=Department)
def create_department(
    db: Session = Depends(deps.get_db),
    *,
    obj_in: DepartmentUpdate,
    current_user: User = Depends(deps.get_current_active_user),
) -> Any:
    if current_user.user_type > settings.UserType.ADMIN.value:
        raise HTTPException(
            status_code=403, detail="Error ID: 104"
        )  # user has no authorization for creating departments
    else:
        department = crud_department.create(db, obj_in=obj_in)
        return department


# get a specific department, can be called by all user types (1 through 4)
@router.get("/{id}/", response_model=Department)
def get_specific_department(
    db: Session = Depends(deps.get_db),
    *,
    id: int,
    current_user: User = Depends(deps.get_current_active_user),
) -> Any:
    department = crud_department.get(db, id)
    return department


# update a specific department, can be called by only superadmin and admin
@router.put("/{id}/")
def update_department(
    db: Session = Depends(deps.get_db),
    *,
    id: int,
    obj_in: DepartmentUpdate,
    current_user: User = Depends(deps.get_current_active_user),
) -> Any:
    if current_user.user_type > settings.UserType.ADMIN.value:
        raise HTTPException(
            status_code=403, detail="Error ID: 105"
        )  # user has no authorization for updating departments
    else:
        department = crud_department.get(db, id)
        crud_department.update(db, db_obj=department, obj_in=obj_in)
        return {"status": "success"}


@router.get("/{id}/courses/", response_model=List[Course])
def get_department_course(
    db: Session = Depends(deps.get_db),
    *,
    id: int,
    current_user: User = Depends(deps.get_current_admin_or_above),
) -> Any:
    department = crud_department.get(db, id)
    courses = department.courses
    return courses


@router.delete("/{department_id}/")
async def delete_department(
    db: Session = Depends(deps.get_db),
    user=Depends(deps.get_current_admin_or_above),
    *,
    department_id: int,
):
    crud_department.remove(db=db, id=department_id)
    return {"msg": "success"}