Set DRF permission_classes and filter_backends globally

uvdat/core/rest/analytics.py

@@ -6,19 +6,13 @@
 from rest_framework.viewsets import ReadOnlyModelViewSet
 
 from uvdat.core.models import Project, TaskResult
-from uvdat.core.rest.access_control import (
-    GuardianFilter,
-    GuardianPermission,
-)
 import uvdat.core.rest.serializers as uvdat_serializers
 from uvdat.core.tasks.analytics import analysis_types
 
 
 class AnalyticsViewSet(ReadOnlyModelViewSet):
     queryset = TaskResult.objects.all()
     serializer_class = uvdat_serializers.TaskResultSerializer
-    permission_classes = [GuardianPermission]
-    filter_backends = [GuardianFilter]
 
     @action(
         detail=False,

uvdat/core/rest/basemap.py

@@ -3,12 +3,9 @@
 from rest_framework.viewsets import ModelViewSet
 
 from uvdat.core.models import Basemap
-from uvdat.core.rest.access_control import GuardianFilter, GuardianPermission
 from uvdat.core.rest.serializers import BasemapSerializer
 
 
 class BasemapViewSet(ModelViewSet):
     queryset = Basemap.objects.all()
     serializer_class = BasemapSerializer
-    permission_classes = [GuardianPermission]
-    filter_backends = [GuardianFilter]

uvdat/core/rest/chart.py

@@ -6,15 +6,12 @@
 from rest_framework.viewsets import ModelViewSet
 
 from uvdat.core.models import Chart
-from uvdat.core.rest.access_control import GuardianFilter, GuardianPermission
 from uvdat.core.rest.serializers import ChartSerializer, FileItemSerializer
 
 
 class ChartViewSet(ModelViewSet):
     queryset = Chart.objects.all()
     serializer_class = ChartSerializer
-    permission_classes = [GuardianPermission]
-    filter_backends = [GuardianFilter]
 
     def get_queryset(self):
         qs = super().get_queryset()

uvdat/core/rest/colormap.py

@@ -3,12 +3,9 @@
 from rest_framework.viewsets import ModelViewSet
 
 from uvdat.core.models import Colormap
-from uvdat.core.rest.access_control import GuardianFilter, GuardianPermission
 from uvdat.core.rest.serializers import ColormapSerializer
 
 
 class ColormapViewSet(ModelViewSet):
     queryset = Colormap.objects.all()
     serializer_class = ColormapSerializer
-    permission_classes = [GuardianPermission]
-    filter_backends = [GuardianFilter]

uvdat/core/rest/data.py

@@ -12,7 +12,6 @@
 from rest_framework.viewsets import GenericViewSet
 
 from uvdat.core.models import RasterData, VectorData, VectorFeature
-from uvdat.core.rest.access_control import GuardianFilter, GuardianPermission
 from uvdat.core.rest.explorer import IPyLeafletTokenAuth
 from uvdat.core.rest.serializers import RasterDataSerializer, VectorDataSerializer
 
@@ -84,9 +83,6 @@ def get_filter_string(filters: dict | None = None):
 
 
 class GenericDataViewSet(GenericViewSet, mixins.RetrieveModelMixin):
-    permission_classes = [GuardianPermission]
-    filter_backends = [GuardianFilter]
-
     @property
     def authentication_classes(self):
         auth_classes = [IPyLeafletTokenAuth]

uvdat/core/rest/dataset.py

@@ -4,8 +4,8 @@
 from rest_framework.response import Response
 from rest_framework.viewsets import ModelViewSet
 
+from uvdat.core.access_control import DatasetGuardianPermission
 from uvdat.core.models import Dataset, DatasetTag
-from uvdat.core.rest.access_control import DatasetGuardianPermission, GuardianFilter
 from uvdat.core.rest.serializers import (
     DatasetSerializer,
     FileItemSerializer,
@@ -21,7 +21,6 @@ class DatasetViewSet(ModelViewSet):
     queryset = Dataset.objects.all()
     serializer_class = DatasetSerializer
     permission_classes = [DatasetGuardianPermission]
-    filter_backends = [GuardianFilter]
 
     def get_queryset(self):
         qs = super().get_queryset()

uvdat/core/rest/file_item.py

@@ -6,7 +6,6 @@
 from rest_framework.viewsets import ModelViewSet
 
 from uvdat.core.models import Dataset, FileItem, RasterData, VectorData
-from uvdat.core.rest.access_control import GuardianFilter, GuardianPermission
 from uvdat.core.rest.serializers import (
     FileItemSerializer,
     RasterDataSerializer,
@@ -17,8 +16,6 @@
 class FileItemViewSet(ModelViewSet):
     queryset = FileItem.objects.all()
     serializer_class = FileItemSerializer
-    permission_classes = [GuardianPermission]
-    filter_backends = [GuardianFilter]
 
     def get_queryset(self):
         qs = super().get_queryset()

uvdat/core/rest/layer.py

@@ -7,7 +7,6 @@
 from rest_framework.viewsets import ModelViewSet, ReadOnlyModelViewSet
 
 from uvdat.core.models import Layer, LayerFrame, LayerStyle
-from uvdat.core.rest.access_control import GuardianFilter, GuardianPermission
 from uvdat.core.rest.serializers import (
     LayerFrameSerializer,
     LayerSerializer,
@@ -18,8 +17,6 @@
 class LayerViewSet(ReadOnlyModelViewSet):
     queryset = Layer.objects.select_related("dataset").all()
     serializer_class = LayerSerializer
-    permission_classes = [GuardianPermission]
-    filter_backends = [GuardianFilter]
 
     @action(detail=True, methods=["get"])
     def frames(self, request, **kwargs):
@@ -32,15 +29,11 @@ def frames(self, request, **kwargs):
 class LayerFrameViewSet(ReadOnlyModelViewSet):
     queryset = LayerFrame.objects.all()
     serializer_class = LayerFrameSerializer
-    permission_classes = [GuardianPermission]
-    filter_backends = [GuardianFilter]
 
 
 class LayerStyleViewSet(ModelViewSet):
     queryset = LayerStyle.objects.all()
     serializer_class = LayerStyleSerializer
-    permission_classes = [GuardianPermission]
-    filter_backends = [GuardianFilter]
 
     def get_queryset(self):
         qs = super().get_queryset()

uvdat/core/rest/networks.py

@@ -7,7 +7,6 @@
 from rest_framework.viewsets import ModelViewSet
 
 from uvdat.core.models import Network
-from uvdat.core.rest.access_control import GuardianFilter, GuardianPermission
 from uvdat.core.rest.serializers import (
     NetworkEdgeSerializer,
     NetworkNodeSerializer,
@@ -26,8 +25,6 @@ class GCCResultSerializer(serializers.Serializer):
 class NetworkViewSet(ModelViewSet):
     queryset = Network.objects.all()
     serializer_class = NetworkSerializer
-    permission_classes = [GuardianPermission]
-    filter_backends = [GuardianFilter]
 
     @action(detail=True, methods=["get"])
     def nodes(self, request, **kwargs):

uvdat/core/rest/project.py

@@ -10,7 +10,6 @@
 from rest_framework.viewsets import ModelViewSet
 
 from uvdat.core.models import Project
-from uvdat.core.rest.access_control import GuardianFilter, GuardianPermission
 from uvdat.core.rest.serializers import ProjectPermissionsSerializer, ProjectSerializer
 
 if typing.TYPE_CHECKING:
@@ -20,8 +19,6 @@
 class ProjectViewSet(ModelViewSet):
     queryset = Project.objects.all().order_by("name")
     serializer_class = ProjectSerializer
-    permission_classes = [GuardianPermission]
-    filter_backends = [GuardianFilter]
 
     def perform_create(self, serializer):
         project: Project = serializer.save()

uvdat/core/rest/regions.py

@@ -4,13 +4,10 @@
 from rest_framework.viewsets import GenericViewSet
 
 from uvdat.core.models import Region
-from uvdat.core.rest.access_control import GuardianFilter, GuardianPermission
 
 from .serializers import RegionSerializer
 
 
 class RegionViewSet(mixins.RetrieveModelMixin, mixins.ListModelMixin, GenericViewSet):
     queryset = Region.objects.all()
     serializer_class = RegionSerializer
-    permission_classes = [GuardianPermission]
-    filter_backends = [GuardianFilter]

uvdat/core/rest/user.py

@@ -5,6 +5,7 @@
 from django.contrib.auth.models import User
 from django.http import HttpResponse
 from rest_framework.decorators import action
+from rest_framework.permissions import IsAuthenticated
 from rest_framework.viewsets import ReadOnlyModelViewSet
 
 from .serializers import UserSerializer
@@ -13,6 +14,8 @@
 class UserViewSet(ReadOnlyModelViewSet):
     queryset = User.objects.all()
     serializer_class = UserSerializer
+    permission_classes = [IsAuthenticated]
+    filter_backends = []
 
     @action(detail=False, pagination_class=None)
     def me(self, request):

uvdat/settings/base.py

@@ -129,8 +129,8 @@
 REST_FRAMEWORK["DEFAULT_AUTHENTICATION_CLASSES"] += [
     "rest_framework.authentication.TokenAuthentication",
 ]
-# Overwrite this
-REST_FRAMEWORK["DEFAULT_PERMISSION_CLASSES"] = ["rest_framework.permissions.IsAuthenticated"]
+REST_FRAMEWORK["DEFAULT_PERMISSION_CLASSES"] = ["uvdat.core.access_control.GuardianPermission"]
+REST_FRAMEWORK["DEFAULT_FILTER_BACKENDS"] = ["uvdat.core.access_control.GuardianFilter"]
 
 CORS_ALLOWED_ORIGINS: list[str] = env.list("DJANGO_CORS_ALLOWED_ORIGINS", cast=str, default=[])
 CORS_ALLOWED_ORIGIN_REGEXES: list[str] = env.list(