Fix Auth Issues; Add SubmissionViewSet

Author: gigincg

course_api/typeform/api_views.py

@@ -3,8 +3,9 @@
 from rest_framework.response import Response
 from rest_framework.serializers import Serializer, CharField, IntegerField
 from rest_framework.viewsets import GenericViewSet, ModelViewSet
-from course_api.typeform.models import Form, FormField
-from course_api.typeform.serializers import FieldSerializer, FormSerializer
+from rest_framework.permissions import IsAuthenticated
+from course_api.typeform.models import Form, FormField, Submission
+from course_api.typeform.serializers import FieldSerializer, FormSerializer, SubmissionSerializer
 from drf_yasg.utils import swagger_auto_schema
 from yaml import serialize
 
@@ -36,10 +37,8 @@ def mock_test(self, request):
         ])
 
 
-class FormViewSet(LoginRequiredMixin, RetrieveModelMixin, ListModelMixin, UpdateModelMixin, GenericViewSet, CreateModelMixin):
+class FormViewSet(RetrieveModelMixin, ListModelMixin, UpdateModelMixin, GenericViewSet, CreateModelMixin):
     serializer_class = FormSerializer
-    authentication_classes = []
-    authorization_classes = []
     queryset = Form.objects.all()
 
     def get_queryset(self, *args, **kwargs):
@@ -64,3 +63,24 @@ def get_queryset(self):
     def perform_create(self, serializer):
         # Add Authorization
         serializer.save(form_id=self.kwargs['form_pk'])
+
+
+class SubmissionViewSet(RetrieveModelMixin, ListModelMixin, CreateModelMixin, GenericViewSet):
+    serializer_class = SubmissionSerializer
+    permission_classes = [IsAuthenticated]
+
+    def get_queryset(self):
+        if(self.request.user.is_anonymous):
+            raise PermissionError("You must be authenticated to use this API.")
+        return Submission.objects.filter(form=self.kwargs['form_pk'])
+
+    def perform_create(self, serializer):
+        # Add Authorization
+        serializer.save(form_id=self.kwargs['form_pk'])
+
+    def list(self, request, *args, **kwargs):
+        # Add Authorization
+        if(self.request.user.is_anonymous):
+            raise PermissionError("You must be authenticated to use this API.")
+        self.queryset.filter(form__created_by=self.request.user)
+        return super().list(request, *args, **kwargs)

course_api/typeform/models.py

@@ -4,24 +4,27 @@
 from course_api.utils.models.jsonfield import JSONField
 from course_api.users.models import User
 
+
 class FormField(BaseModel):
     class FormFieldKind(enum.Enum):
         TEXT = "text"
         DROPDOWN = "dropdown"
         RADIO = "radio"
 
     kind = models.CharField(max_length=20, choices=[(tag.name, tag.value) for tag in FormFieldKind])
-    label = models.CharField(max_length=100)    
+    label = models.CharField(max_length=100)
     options = JSONField(null=True, blank=True, verbose_name="Dropdown Options")
     value = models.CharField(max_length=100, null=True, blank=True)
     form = models.ForeignKey("Form", on_delete=models.CASCADE)
 
     class Meta:
         verbose_name = "Form Field"
         verbose_name_plural = "Form Fields"
+
     def __str__(self):
         return f"{self.label} ({self.kind})"
 
+
 class Form(BaseModel):
     title = models.CharField(max_length=100)
     description = models.TextField(null=True, blank=True)
@@ -33,6 +36,7 @@ class Form(BaseModel):
     def __str__(self):
         return self.title
 
+
 class Submission(BaseModel):
     form = models.ForeignKey(Form, on_delete=models.CASCADE)
     submitted_by = models.ForeignKey(User, on_delete=models.CASCADE)
@@ -42,12 +46,11 @@ class Submission(BaseModel):
     def __str__(self):
         return f"{self.form.name} - {self.form_field.label} ({self.form_field.kind})"
 
+
 class Answer(BaseModel):
     form_field = models.ForeignKey(FormField, on_delete=models.CASCADE)
     answer = models.CharField(max_length=100)
     submission = models.ForeignKey(Submission, on_delete=models.CASCADE)
 
     def __str__(self):
         return f"{self.submission.form.name} - {self.form_field.label} ({self.form_field.kind})"
-
-    

course_api/typeform/serializers.py

@@ -1,14 +1,22 @@
 from attr import field
 from coreapi import Field
-from course_api.typeform.models import Form, FormField
+from course_api.typeform.models import Form, FormField, Submission
 from rest_framework import serializers
 
+
 class FormSerializer(serializers.ModelSerializer):
     class Meta:
         model = Form
         fields = ('id', 'title', 'description', 'is_public')
 
+
 class FieldSerializer(serializers.ModelSerializer):
     class Meta:
         model = FormField
         fields = ('id', 'label', 'kind', 'options', 'value')
+
+
+class SubmissionSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = Submission
+        fields = ('id', 'form', 'created_date')