Organization member-management

backend/apps/ecommerce/tests.py

@@ -112,7 +112,7 @@ def setUp(self) -> None:
         MembershipFactory(
             user=self.staff_user,
             organization=self.organization,
-            group=self.organization.primary_group,
+            group=self.organization.member_group,
         )
         self.total_quantity = 5
         self.max_buyable_quantity = 2

backend/apps/forms/signals.py

@@ -9,6 +9,6 @@
 def handle_new_form(sender, instance: Form, created: bool, **kwargs) -> None:
     if created:
         perms = ["forms.manage_form", "forms.change_form", "forms.delete_form"]
-        group = instance.organization.hr_group.group
+        group = instance.organization.admin_group.group
         for perm in perms:
             assign_perm(perm, group, instance)

backend/apps/forms/tests.py

@@ -31,7 +31,7 @@ def setUp(self) -> None:
         MembershipFactory(
             user=self.authorized_user,
             organization=self.organization,
-            group=self.organization.hr_group,
+            group=self.organization.admin_group,
         )
 
         # Create the form

backend/apps/organizations/migrations/0026_auto_20210426_1802.py

@@ -18,7 +18,8 @@ def set_primary_groups(apps, schema_editor):
             created = True
         if organization.hr_group is None:
             hr_group = ResponsibleGroup.objects.create(
-                name="HR", description=f"HR-gruppen til {organization.name}. Tillatelser for å se og behandle søknader."
+                name="HR",
+                description=f"HR-gruppen til {organization.name}. Tillatelser for å se og behandle søknader.",
             )
             organization.hr_group = hr_group
             created = True

backend/apps/organizations/migrations/0034_alter_organization_options.py

@@ -1,4 +1,4 @@
-# Generated by Django 3.2.16 on 2023-01-23 18:47
+# Generated by Django 3.2.16 on 2022-11-21 20:19
 
 from django.db import migrations
 

backend/apps/organizations/models.py

@@ -4,7 +4,7 @@
 from django.db import models
 from django.db.models import UniqueConstraint
 
-from apps.permissions.constants import HR_TYPE, PRIMARY_TYPE
+from apps.permissions.constants import ADMIN_GROUP_TYPE, MEMBER_GROUP_TYPE
 from apps.permissions.models import ResponsibleGroup
 
 
@@ -28,7 +28,8 @@ class Organization(models.Model):
     # Permission groups
     # All members are added to the primary group
     # Members can be added to groups programatically
-    # The HR-group has the "forms.manage_form" permission, allowing them to view and manage responses to e.g. listings.
+    # The ADMIN-group has the "forms.manage_form" permission, allowing them to view and manage responses to e.g.
+    # listings.
     # The primary group is intended to act as a group for organizations who need any kind of
     # special permission, e.g. hyttestyret
     # Or if we wish to limit the creation of events or listings to certain organizations.
@@ -42,16 +43,16 @@ class Organization(models.Model):
     )
 
     @property
-    def hr_group(self) -> Optional["ResponsibleGroup"]:
+    def admin_group(self) -> Optional["ResponsibleGroup"]:
         try:
-            return self.permission_groups.get(group_type=HR_TYPE)
+            return self.permission_groups.get(group_type=ADMIN_GROUP_TYPE)
         except ResponsibleGroup.DoesNotExist:
             return None
 
     @property
-    def primary_group(self) -> Optional["ResponsibleGroup"]:
+    def member_group(self) -> Optional["ResponsibleGroup"]:
         try:
-            return self.permission_groups.get(group_type=PRIMARY_TYPE)
+            return self.permission_groups.get(group_type=MEMBER_GROUP_TYPE)
         except ResponsibleGroup.DoesNotExist:
             return None
 

backend/apps/organizations/mutations.py

@@ -2,12 +2,12 @@
 from django.utils.text import slugify
 from decorators import permission_required
 
-from apps.users.types import UserType
 from apps.permissions.models import ResponsibleGroup
 
 from apps.organizations import permissions as perms
 from apps.organizations.models import Membership, Organization
 from apps.organizations.types import MembershipType, OrganizationType
+from apps.users.models import User
 
 
 def get_organization_from_data(*_, membership_data, **kwargs) -> Organization:
@@ -47,7 +47,7 @@
         id = graphene.ID(required=True)
         organization_data = OrganizationInput(required=False)
 
-    @permission_required("organizations.manage_organization")
+    @permission_required("organizations.change_organization")
     def mutate(self, info, id, organization_data=None):
         organization = Organization.objects.get(pk=id)
         user = info.context.user
@@ -111,12 +111,77 @@
         return AssignMembership(membership=membership, ok=True)
 
 
-class RemoveMembership(graphene.Mutation):
-    removed_member = graphene.Field(UserType)
+class MembershipInputWithUsername(graphene.InputObjectType):
+    username = graphene.String()
+    organization_id = graphene.ID()
+    group_id = graphene.ID()
+
+
+class AssignMembershipWithUsername(graphene.Mutation):
+    membership = graphene.Field(MembershipType)
     ok = graphene.Boolean()
 
     class Arguments:
-        member_id = graphene.ID()
+        membership_data = MembershipInputWithUsername(required=True)
+
+    @permission_required("organizations.manage_organization", fn=get_organization_from_data)
+    def mutate(self, _, membership_data):
+        organization = Organization.objects.prefetch_related("permission_groups").get(
+            pk=membership_data["organization_id"]
+        )
+
+        try:
+            group = organization.permission_groups.get(pk=membership_data.get("group_id"))
+        except ResponsibleGroup.DoesNotExist:
+            return AssignMembershipWithUsername(membership=None, ok=False)
+
+        try:
+            user_id = User.objects.get(username=membership_data["username"]).id
+        except User.DoesNotExist:
+            return AssignMembershipWithUsername(membership=None, ok=False)
+
+        membership = Membership(
+            organization_id=membership_data["organization_id"],
+            user_id=user_id,
+            group=group,
+        )
+        membership.save()
+        return AssignMembershipWithUsername(membership=membership, ok=True)
 
-    def mutate(self, info, member_id):
-        raise NotImplementedError("Denne funksjonaliteten er ikke implementert.")
+
+class DeleteMembership(graphene.Mutation):
+    membership = graphene.Field(MembershipType)
+    ok = graphene.Boolean()
+
+    class Arguments:
+        membership_id = graphene.ID()
+
+    @permission_required("organizations.manage_organization")
+    def mutate(self, info, membership_id):
+        membership = Membership.objects.get(pk=membership_id)
+        membership.delete()
+
+        ok = True
+        return DeleteMembership(ok=ok)
+
+
+class ChangeMembershipInput(graphene.InputObjectType):
+    membership_id = graphene.ID()
+    group_id = graphene.ID()
+
+
+class ChangeMembership(graphene.Mutation):
+    membership = graphene.Field(MembershipType)
+    ok = graphene.Boolean()
+
+    class Arguments:
+        membership_data = ChangeMembershipInput(required=True)
+
+    @permission_required("organizations.manage_organization")
+    def mutate(self, info, membership_data):
+        membership = Membership.objects.get(pk=membership_data["membership_id"])
+        membership.group_id = membership_data["group_id"]
+        membership.save()
+
+        ok = True
+        return ChangeMembership(membership=membership, ok=ok)

backend/apps/organizations/schema.py

@@ -3,9 +3,12 @@
 
 from .mutations import (
     AssignMembership,
+    AssignMembershipWithUsername,
+    DeleteMembership,
     CreateOrganization,
     DeleteOrganization,
     UpdateOrganization,
+    ChangeMembership,
 )
 from .resolvers import MembershipResolvers, OrganizationResolvers
 from .types import MembershipType, OrganizationType
@@ -17,6 +20,9 @@ class OrganizationMutations(graphene.ObjectType):
     delete_organization = DeleteOrganization.Field()
 
     assign_membership = AssignMembership.Field()
+    delete_membership = DeleteMembership.Field()
+    change_membership = ChangeMembership.Field()
+    assign_membership_with_username = AssignMembershipWithUsername.Field()
 
 
 class OrganizationQueries(graphene.ObjectType, OrganizationResolvers, MembershipResolvers):

backend/apps/organizations/signals.py

@@ -7,19 +7,19 @@
 
 from apps.organizations.models import Membership, Organization
 from apps.permissions.constants import (
-    HR_GROUP_NAME,
-    HR_TYPE,
+    ADMIN_GROUP_NAME,
+    ADMIN_GROUP_TYPE,
     ORGANIZATION,
-    PRIMARY_GROUP_NAME,
-    PRIMARY_TYPE,
+    MEMBER_GROUP_NAME,
+    MEMBER_GROUP_TYPE,
 )
 from apps.permissions.models import ResponsibleGroup
 
 
 @receiver(post_save, sender=Membership)
 def handle_new_member(instance: Membership, **kwargs):
     optional_group: Optional[ResponsibleGroup] = instance.group
-    group: Group = instance.organization.primary_group.group
+    group: Group = instance.organization.member_group.group
     org_group: Group = Group.objects.get(name=ORGANIZATION)
     user = instance.user
     user.groups.add(org_group)
@@ -31,7 +31,7 @@
 
 @receiver(pre_delete, sender=Membership)
 def handle_removed_member(instance: Membership, **kwargs):
-    group: Group = instance.organization.primary_group.group
+    group: Group = instance.organization.member_group.group
     org_group: Group = Group.objects.get(name=ORGANIZATION)
     user = instance.user
     if group:
@@ -44,19 +44,21 @@
 @receiver(post_save, sender=Organization)
 def create_default_groups(instance: Organization, created, **kwargs):
     """
-    Creates and assigns a primary group and HR group to members of the organization.
+    Creates and assigns a primary group and ADMIN group to members of the organization.
     """
     if created:
         ResponsibleGroup.objects.create(
-            name=PRIMARY_GROUP_NAME,
+            name=f"{instance.name}:{MEMBER_GROUP_NAME}",
             description=f"Medlemmer av {instance.name}.",
             organization=instance,
-            group_type=PRIMARY_TYPE,
+            group_type=MEMBER_GROUP_TYPE,
         )
-        hr_group = ResponsibleGroup.objects.create(
-            name=HR_GROUP_NAME,
-            description=f"HR-gruppen til {instance.name}. Tillatelser for å se og behandle søknader.",
+        admin_group = ResponsibleGroup.objects.create(
+            name=f"{instance.name}:{ADMIN_GROUP_NAME}",
+            description=f"ADMIN-gruppen til {instance.name}. Tillatelser for å se og behandle søknader og medlemmer.",
             organization=instance,
-            group_type=HR_TYPE,
+            group_type=ADMIN_GROUP_TYPE,
         )
-        assign_perm("forms.add_form", hr_group.group)
+        print(admin_group.group, instance)
+        assign_perm("forms.add_form", admin_group.group)
+        # assign_perm("organizations.manage_organization", admin_group.group, instance)

backend/apps/organizations/types.py

@@ -14,8 +14,8 @@
 class OrganizationType(DjangoObjectType):
     absolute_slug = graphene.String()
     listings = graphene.List(NonNull(ListingType))
-    primary_group = graphene.Field(source="primary_group", type=ResponsibleGroupType)
-    hr_group = graphene.Field(source="hr_group", type=ResponsibleGroupType)
+    member_group = graphene.Field(source="member_group", type=ResponsibleGroupType)
+    admin_group = graphene.Field(source="admin_group", type=ResponsibleGroupType)
 
     class Meta:
         model = Organization
@@ -30,8 +30,8 @@ class Meta:
             "users",
             "events",
             "logo_url",
-            "primary_group",
-            "hr_group",
+            "member_group",
+            "admin_group",
         ]
 
     @staticmethod

backend/apps/permissions/constants.py

@@ -3,14 +3,14 @@
 DefaultPermissionsType = Final[list[tuple[str, str]]]
 
 # Default ResponsibleGroup types
-PRIMARY_TYPE: Literal["PRIMARY"] = "PRIMARY"
-HR_TYPE: Literal["HR"] = "HR"
+MEMBER_GROUP_TYPE: Literal["MEMBER"] = "MEMBER"
+ADMIN_GROUP_TYPE: Literal["ADMIN"] = "ADMIN"
 
 ORGANIZATION: Final = "Organization member"
 INDOK: Final = "Indøk"
 REGISTERED_USER: Final = "Registered user"
-PRIMARY_GROUP_NAME: Final = "Medlem"
-HR_GROUP_NAME: Final = "HR"
+MEMBER_GROUP_NAME: Final = "Medlem"
+ADMIN_GROUP_NAME: Final = "Administrator"
 
 DEFAULT_ORGANIZATION_PERMISSIONS: DefaultPermissionsType = [
     ("events", "add_event"),

backend/apps/permissions/migrations/0003_auto_20210824_1213.py

@@ -4,7 +4,7 @@
 
 from django.db import migrations
 from django.db.models.query_utils import Q
-from apps.permissions.constants import PRIMARY_GROUP_NAME, HR_GROUP_NAME
+from apps.permissions.constants import MEMBER_GROUP_NAME, ADMIN_GROUP_NAME
 
 if TYPE_CHECKING:
     from apps.organizations import models
@@ -19,14 +19,14 @@ def improve_group_legibility(apps, _):
         responsible_group: "ResponsibleGroup" = group.responsiblegroup
         try:
             organization: "models.Organization" = Organization.objects.get(
-                Q(primary_group=responsible_group) | Q(hr_group=responsible_group)
+                Q(member_group=responsible_group) | Q(admin_group=responsible_group)
             )
 
             responsible_group_name = responsible_group.name
-            if organization.primary_group == responsible_group:
-                responsible_group_name = PRIMARY_GROUP_NAME
-            elif organization.hr_group == responsible_group:
-                responsible_group_name = HR_GROUP_NAME
+            if organization.member_group == responsible_group:
+                responsible_group_name = MEMBER_GROUP_NAME
+            elif organization.admin_group == responsible_group:
+                responsible_group_name = ADMIN_GROUP_NAME
             if responsible_group.name != responsible_group_name:
                 responsible_group.name = responsible_group_name
                 responsible_group.save()
@@ -50,7 +50,7 @@ def reverse_legible_group_names(apps, _):
         responsible_group = group.responsiblegroup
         try:
             organization = responsible_group.organization
-            if organization.primary_group == responsible_group:
+            if organization.member_group == responsible_group:
                 responsible_group.name = organization.name
                 responsible_group.save()
         except Organization.DoesNotExist: