Add an endpoint to show a user their permissions (#326)

rconweb/api/auth.py

@@ -6,6 +6,7 @@
 from typing import Any
 
 from django.contrib.auth import authenticate, login, logout
+from django.contrib.auth.models import Permission
 from django.contrib.auth.decorators import permission_required
 from django.contrib.auth.hashers import make_password
 from django.contrib.auth.models import User
@@ -235,3 +236,22 @@ def get_ingame_mods(request):
         result=ingame_mods(),
         failed=False,
     )
+
+@csrf_exempt
+@login_required()
+def get_own_user_permissions(request):
+    command_name = "get_own_user_permissions"
+
+    permissions = Permission.objects.filter(user=request.user)
+    trimmed_permissions = [
+        {
+            "permission": p['codename'],
+            "description": p['name'],
+        }
+        for p in permissions.values()
+    ]
+
+    return api_response(command=command_name, result={
+        "permissions": trimmed_permissions,
+        "is_superuser": request.user.is_superuser,
+        }, failed=False)

rconweb/api/urls.py

@@ -70,6 +70,7 @@ def get_api_documentation(request):
     ("is_logged_in", auth.is_logged_in),
     ("get_online_mods", auth.get_online_mods),
     ("get_ingame_mods", auth.get_ingame_mods),
+    ("get_own_user_permissions", auth.get_own_user_permissions),
     ("get_services", services.get_services),
     ("do_service", services.do_service),
     ("server_list", multi_servers.get_server_list),