fix: permisos para el board del usuario

Incluye comando para arreglar los permisos de los usuarios que ya
tiene el sistema.

Author: ybenitezf

newswriter/admin_commands.py

@@ -1,4 +1,6 @@
 from newswriter.models.security import Role, User, create_user as CreateUser
+from newswriter.models.content import Board
+from newswriter.models.permissions import BOARD_ALL_PERMS
 from newswriter.schemas import UserSchema, RoleSchema
 from newswriter import db
 from flask import Blueprint
@@ -95,3 +97,13 @@ def listar_roles():
     click.echo("Listado de roles")
     s = RoleSchema()
     pprint(s.dump(Role.query.all(), many=True), indent=2)
+
+
+@users_cmds.cli.command('fixboards')
+def fix_userboards():
+    """Ensure all users has a board"""
+    for u in User.query.all():
+        for p in BOARD_ALL_PERMS:
+            u.getUserRole().addPermission(
+                p, Board.createUserBoard(u).name, 'board')
+    db.session.commit()

newswriter/models/security.py

@@ -43,6 +43,8 @@ def addPermission(self, name, record_id, model_name):
             self.permissions.append(p)
             self.query.session.add(self)
 
+        return p
+
     @classmethod
     def getUserEspecialRole(cls, user: 'User') -> 'Role':
         return cls.query.filter_by(
@@ -136,12 +138,7 @@ def create_user(
     user_board = content.Board.createUserBoard(user)
     # assing add user permissions on the board
     for p in BOARD_ALL_PERMS:
-        db.session.add(Permission(
-            name=p,
-            model_name='board',
-            record_id=user_board.id,
-            role_id=user_rol.id
-        ))
+        user_rol.addPermission(p, user_board.name, 'board')
     # --
 
     return user

newswriter/templates/default/index.html

@@ -5,9 +5,9 @@
 {% block content %}
 <div class="works-list">
 
-  {% if results.items: %}
+  {% if results.total > 0 %}
 
-  {% for item in results.items: %}
+  {% for item in results.items %}
   <div class="card">
     <div class="card-content">
       <span class="card-title"><a href="{{ url_for('.preview', pkid=item.id) }}">{{ item.headline }}</a></span>

newswriter/views/default.py

@@ -41,9 +41,16 @@ def index():
     page = request.args.get('page', 1, type=int)
     ub = Board.getUserBoard(current_user)
 
-    articulos = Article.query.filter(
-        Article.board_id == ub.id).order_by(
-            Article.created_on.desc()).paginate(page, per_page=4)
+    if ub:
+        articulos = Article.query.filter(
+            Article.board_id == ub.name).order_by(
+                Article.created_on.desc()).paginate(page, per_page=4)
+    else:
+        # empty result set
+        articulos = {
+            "total": 0,
+            "items": []
+        }
 
     return render_template(
         'default/index.html', results=articulos)