65 lines
2.2 KiB
Python
65 lines
2.2 KiB
Python
# /var/www/bennysboard/core/models.py
|
|
from flask_sqlalchemy import SQLAlchemy
|
|
from datetime import datetime
|
|
from werkzeug.security import generate_password_hash, check_password_hash
|
|
|
|
db = SQLAlchemy()
|
|
|
|
user_roles = db.Table(
|
|
"user_roles",
|
|
db.Column("user_id", db.Integer, db.ForeignKey("users.id"), primary_key=True),
|
|
db.Column("role_id", db.Integer, db.ForeignKey("roles.id"), primary_key=True),
|
|
)
|
|
|
|
role_perms = db.Table(
|
|
"role_permissions",
|
|
db.Column("role_id", db.Integer, db.ForeignKey("roles.id"), primary_key=True),
|
|
db.Column("perm_id", db.Integer, db.ForeignKey("permissions.id"), primary_key=True),
|
|
)
|
|
|
|
|
|
class User(db.Model):
|
|
__tablename__ = "users"
|
|
|
|
id = db.Column(db.Integer, primary_key=True)
|
|
email = db.Column(db.String(255), unique=True, index=True)
|
|
username = db.Column(db.String(80), unique=True)
|
|
password_h = db.Column(db.String(255)) # nullable for Discord-only accounts
|
|
discord_id = db.Column(db.String(40), index=True)
|
|
is_active = db.Column(db.Boolean, default=True)
|
|
created_at = db.Column(db.DateTime, default=datetime.utcnow)
|
|
|
|
roles = db.relationship("Role", secondary=user_roles, back_populates="users")
|
|
|
|
def set_password(self, raw: str) -> None:
|
|
self.password_h = generate_password_hash(raw)
|
|
|
|
def check_password(self, raw: str) -> bool:
|
|
return bool(self.password_h) and check_password_hash(self.password_h, raw)
|
|
|
|
def has_perm(self, code: str) -> bool:
|
|
return any(code in r.perm_codes() for r in self.roles)
|
|
|
|
|
|
class Role(db.Model):
|
|
__tablename__ = "roles"
|
|
|
|
id = db.Column(db.Integer, primary_key=True)
|
|
name = db.Column(db.String(80), unique=True)
|
|
|
|
users = db.relationship("User", secondary=user_roles, back_populates="roles")
|
|
permissions = db.relationship("Permission", secondary=role_perms, back_populates="roles")
|
|
|
|
def perm_codes(self) -> set[str]:
|
|
return {p.code for p in self.permissions}
|
|
|
|
|
|
class Permission(db.Model):
|
|
__tablename__ = "permissions"
|
|
|
|
id = db.Column(db.Integer, primary_key=True)
|
|
code = db.Column(db.String(120), unique=True, index=True)
|
|
|
|
roles = db.relationship("Role", secondary=role_perms, back_populates="permissions")
|
|
|