U ô‰Vb›:ã@s dZdZdZddlmZmZmZmZmZddl m Z m Z ddl m Z mZmZmZmZmZmZddlmZmZmZddlmZmZdd lmZGd d „d e ƒZd S) zCopyright 2021, 3Lizz GPL version 3z info@3liz.orgé)ÚQgisÚ QgsExpressionÚ QgsMapLayerÚ QgsProjectÚQgsVectorLayer)ÚQgsAccessControlFilterÚQgsServerInterface)Úget_lizmap_configÚget_lizmap_groupsÚget_lizmap_layer_login_filterÚget_lizmap_layers_configÚget_lizmap_override_filterÚget_lizmap_user_loginÚis_editing_context)Ú ALL_FEATURESÚ NO_FEATURESÚFilterByPolygon)ÚLoggerÚ profiling)Úto_boolcs eZdZeddœ‡fdd„ Zeedœ‡fdd„ Zeedœ‡fdd „ Ze e j dœ‡fd d „ Z ed œ‡fd d„ Z eeedœdd„ƒZeeeeedœdd„ƒZ‡ZS)ÚLizmapAccessControlFilterN)Ú server_ifaceÚreturncstƒ |¡||_dS)N)ÚsuperÚ__init__Úiface)Úselfr©Ú __class__©ú>/var/qgis-server/plugins/lizmap/server/lizmap_accesscontrol.pyr"s z"LizmapAccessControlFilter.__init__)Úlayerrcs`dtjkrdks"ndtjkrJt d¡| |¡}|r>|Stƒ |¡Sd}t |¡tSdS)z( Return an additional expression filter i%yi{yir{zLizmap layerFilterExpressionzkLizmap layerFilterExpression disabled, you should consider upgrading QGIS Server to >= 3.10.13 or >= 3.16.2N) rÚQGIS_VERSION_INTrÚinfoÚget_lizmap_layer_filterrÚlayerFilterExpressionÚcriticalr)rr!Ú filter_expÚmessagerrr r%'s"   ÿ z/LizmapAccessControlFilter.layerFilterExpressioncs(t d¡| |¡}|r|Stƒ |¡S)z; Return an additional subset string (typically SQL) filter zLizmap layerFilterSubsetString)rr#r$rÚlayerFilterSubsetString)rr!r'rrr r)9s   z1LizmapAccessControlFilter.layerFilterSubsetStringcsÖtƒ |¡}t|j ¡ƒ}t|j ¡ƒ}t ¡}| ¡}|  dd¡|krf||d<t |ƒ|d<|  |¡t |ƒdkrv|St |j ¡ƒ}|sŒ|St|ƒ}|sœ|S| ¡} | ¡} d|krð|drð| |dkrÊ|d| rÊ|d| } d} d| krL| drL| d d¡} d d „| Dƒ} t | ƒdkrF|D]}|| kr.d } q.nd } nd } | r¶d | kr¶| d r¶|d| d }t|d ƒ|_t|dƒ|_tt|dƒt|dƒgƒ|_nd|_|_|_n$t d| | f¡d|_|_|_nt d¡d|_|_|_| |ks || s2t d| ¡|S|| }d|ksN|ds`t d| ¡|Sdd „|dDƒ}|D]*}||krvt d|| f¡|Sqvt dd |¡| f¡d|_d|_|_|_|S)z Return the layer rights Ú lizmap_userNÚlizmap_user_groupsrZ editionLayersFZaclú,cSsg|] }| ¡‘qSr©Ústrip©Ú.0Úgrrr Ú tsz>LizmapAccessControlFilter.layerPermissions..TÚ capabilitiesZ createFeatureÚ deleteFeatureZmodifyAttributeZmodifyGeometryz,No edition config defined for layer: %s (%s)z"Lizmap config has no editionLayerszLizmap config has no layer: %sÚgroup_visibilityz(No Lizmap layer group visibility for: %scSsg|] }| ¡‘qSrr-r/rrr r2°sz4Group %s is in Lizmap layer group visibility for: %sz5Groups %s is in Lizmap layer group visibility for: %sú, )rÚlayerPermissionsr rÚrequestHandlerrrÚinstanceÚcustomVariablesÚgetÚlistÚsetCustomVariablesÚlenr ÚconfigFilePathr ÚnameÚidÚsplitrZ canInsertZ canDeleteÚanyZ canUpdaterr#ÚjoinZcanRead)rr!ZrightsÚgroupsÚ user_loginÚprojectÚ custom_varÚcfgÚ cfg_layersÚ layer_nameÚlayer_idZ edit_layerZcan_editZ group_editr1Zedit_layer_capÚ cfg_layerr5rrr r7Bs†         þ  ÿ   ÿ ÿz*LizmapAccessControlFilter.layerPermissions)rc sàtƒ ¡}t|j ¡ƒ}t|ƒdkr(|St|j ¡ƒ}|s>|St|ƒ}|sN|Sd}|  ¡D]N\}}d|ksZ|dstqZdd„|dDƒ}t|ƒdkr |ddkr qZd}qªqZ|rÜt|ƒdkrÊ|ddkrÊd Sd   t t |ƒƒ¡S|S) z! The key used to cache documents rFr5cSsg|] }| ¡‘qSrr-r/rrr r2ìsz6LizmapAccessControlFilter.cacheKey..éÚTz@@) rÚcacheKeyr rr8r>r r?r ÚitemsrDr<Úset) rZdefault_cache_keyrErIrJZhas_group_visibilityZl_namerMr5rrr rPÌs0  z"LizmapAccessControlFilter.cacheKeyc Csöt|j ¡ƒrtSt|j ¡ƒ}t|j ¡ƒ}t|ƒdkrB|sBtSt|j ¡ƒ}|sXtSt |ƒ}|shtS|  ¡}||kr|tSz`t |j ¡ƒ}t |  d¡||dd}t} | ¡rÚ| ¡sÌt d t¡¡tWS| |¡\} } WnFtk r"} z&t | ¡t d t¡¡tWY¢Sd} ~ XYnX| r:t d | ¡¡t||ƒ} | sX| rT| StSd | k} | r‚t| d ƒr‚| r~| StS| d }t|ƒd krÒ|dd krÒ|d krÒt |d ¡}| rÎd | |¡S|S| | ||¡}| ròd | |¡S|S)z/ Get lizmap layer filter based on login filter rZfilter_by_polygonF)Zuse_st_relationshipzOThe filter by polygon configuration is not valid. All features are hidden : {}z\An error occurred when trying to read the filtering by polygon. All features are hidden : {}Nz1The polygon filter subset string is not null : {}Z edition_onlyÚfilterAttributerNrOÚallz {} AND {})r rr8rr rr>r r?r r@rrr;Z is_filteredZis_validrr&ÚformatrZ subset_sqlÚ ExceptionÚ log_exceptionr#r rrÚcreateFieldEqualityExpressionÚ_filter_by_login)rr!rErFrIrJrKZedition_contextZfilter_polygon_configZpolygon_filterÚ_ÚeÚcfg_layer_login_filterZis_edition_onlyÚ attributeZ login_filterrrr r$ÿs~ÿÿÿ ÿÿ &   z1LizmapAccessControlFilter.get_lizmap_layer_filter)r\rEÚloginrcCs`g}t|dƒr"| t |¡¡ndd„|Dƒ}| t d¡¡d t |d¡d |¡¡}|S)zþ Build the string according to the filter by login configuration. :param cfg_layer_login_filter: The Lizmap Filter by login configuration. :param groups: List of groups for the current user :param login: The current user Ú filterPrivatecSsg|]}t |¡‘qSr)rÚ quotedStringr/rrr r2lsz>LizmapAccessControlFilter._filter_by_login..rTz {} IN ({})rSr6)rÚappendrr`rUZquotedColumnRefrD)r\rEr^Z quoted_valuesZ layer_filterrrr rY\s   þz*LizmapAccessControlFilter._filter_by_login)Ú__name__Ú __module__Ú __qualname__rrrÚstrr%r)rrZLayerPermissionsr7rPrr$Ú staticmethodÚdictÚtuplerYÚ __classcell__rrrr r s  3\rN)Ú __copyright__Ú __license__Ú __email__Ú qgis.corerrrrrÚ qgis.serverrrÚlizmap.server.corer r r r r rrZlizmap.server.filter_by_polygonrrrÚlizmap.server.loggerrrÚlizmap.server.toolsrrrrrr Ús$