From c1c0c027ccd4cfb010bb1674b13b2e809135d9b4 Mon Sep 17 00:00:00 2001
From: Hironsan <light.tree.1.13@gmail.com>
Date: Tue, 7 Aug 2018 12:11:26 +0900
Subject: [PATCH] Add superuser permission

---
 app/db.sqlite3      | Bin 262144 -> 262144 bytes
 app/server/views.py |  16 +++++++++++-----
 2 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/app/db.sqlite3 b/app/db.sqlite3
index 76014c1b9129579833c13f0d71427da5f466b2a3..dffb3bf5f959e7d5569d6ac20afa14d477fe4a42 100644
GIT binary patch
delta 610
zcmaix&1(}u7>9SV*<{va=a)z-1%*^pnuEsOP0g2}gci-E{TEC~6HS|BOOiH<hX$=T
z5kC$&=1`%E2ho6w;K9~QYlW5`G=)~Bs1#ACS~RFsCp`%w!Z0t)JoC=)nW<J?)vD|2
zZZdyuPcNCjml*dGcH_1G7*QJD!<{4UP?xGl1A(X-^anzk9u8lO*UfmHJWA}Mm=o{=
zn|Ohbc!yV5#2jWC?!+xHo0Z7K>DVqzsV&0N!}%ovKk*eWv4Qt^gC>^njPv*5ltjYu
z_RJKs>9rhmaeP+5cYMJIyyZupV*#_6=J*tt<gf}vc1lXSFmvI!<w#ejOeY15vp%+|
zbU4rNxGh_ibvkKpHDaz6d#!caawmC;QNbIFDUpu;Y^rFKj7(WqweTU8k8M+3i|V>x
z4TjWU_#Zo(s`VME(R{j4?#(4jrEDgfN|v)mp^zRnrmR^@h(~X>O~2tYf0=cxa?>@e
z@#qgx+xSJSHiuP|iDItawRAuBP@79&Gs=YXgoDaY>1F$X&BZgfB;SRjRO+9QVn$HS
zRq~^iV7hoFnaYg}WqTs$BI;RVP#Yd9jt!b)6;UE??a#joXhGc^sE7}!hq7e>*I{BG
z@>oHfEwio0UUixs*e~{z|23!P))mo4JQT9PHJ;!mE+K=H@ImHEpIFUT7nPlVT~1BD
H-c0-kznrr<

delta 458
zcmXAl&1(};6vf}0ndW7_-bn*31%(D&*oDL)ZKq8ZEz+V{<!?xdiB7RiaYkIYXh7YG
zs9nr5n?jW?qy`)m7i|h%Xdzi?7LAIi1W_oqXi%B<#d0rqbAR`6?x|E_l}hZvDZ2CU
z^bFnE$S)_Ux$-eNMUC3<`JttLJ7G;^QdVX(m9!?Uv~AtaR)cJnzRC|WGztFV5by8<
zU-1D=)KRbX=O2Sd6sl4~CxmdSYkm{bnBZFk|L_a%v5#-~j23pWEBI$H`eb^78@d*>
zhNW{cfj0>L-~iw8MV!1v16$Y<_!@Yht`Mpk|K(LZXiQ7viJ_>f5G?aqerOIDx3nj!
zVs==Ub!!)5d(7`%k=Ff}p=>JlXxjESLU}M_kEPOOXWqSBI+?TO!i|OEqBnDG&UKxV
zQ<(Fd@}hUuaTB7wqU$A=u9xSF1#eApqzPfM-TUY_eu@M-Xya3_gvA%|_m8L&=>?!^
zLHnt6b~Dacj_|s9$GE6R)z{H`EGL{zvLJU;ejbf89uho4fHPRY9<n?XIvpN__vHwU
dGmH?Sy^U4eMG2QMBDQh(YE?Fa@v8hLe+;x2kE{Ry

diff --git a/app/server/views.py b/app/server/views.py
index e2765eba..1a440f4d 100644
--- a/app/server/views.py
+++ b/app/server/views.py
@@ -5,6 +5,7 @@ from collections import Counter
 from io import TextIOWrapper
 
 from django import forms
+from django.contrib.auth.mixins import UserPassesTestMixin
 from django.urls import reverse
 from django_filters.rest_framework import DjangoFilterBackend
 from django.http import JsonResponse, HttpResponse, HttpResponseRedirect
@@ -25,6 +26,11 @@ from .models import DocumentAnnotation, SequenceAnnotation, Seq2seqAnnotation
 from .serializers import LabelSerializer, ProjectSerializer
 
 
+class SuperUserMixin(UserPassesTestMixin):
+    def test_func(self):
+        return self.request.user.is_superuser
+
+
 class IndexView(TemplateView):
     template_name = 'index.html'
 
@@ -71,7 +77,7 @@ class ProjectsView(LoginRequiredMixin, TemplateView):
             return render(request, self.template_name, {'form': form})
 
 
-class DatasetView(LoginRequiredMixin, ListView):
+class DatasetView(SuperUserMixin, LoginRequiredMixin, ListView):
     template_name = 'admin/dataset.html'
     context_object_name = 'documents'
     paginate_by = 5
@@ -82,15 +88,15 @@ class DatasetView(LoginRequiredMixin, ListView):
         return project.documents.all()
 
 
-class LabelView(LoginRequiredMixin, TemplateView):
+class LabelView(SuperUserMixin, LoginRequiredMixin, TemplateView):
     template_name = 'admin/label.html'
 
 
-class StatsView(LoginRequiredMixin, TemplateView):
+class StatsView(SuperUserMixin, LoginRequiredMixin, TemplateView):
     template_name = 'admin/stats.html'
 
 
-class DatasetUpload(LoginRequiredMixin, TemplateView):
+class DatasetUpload(SuperUserMixin, LoginRequiredMixin, TemplateView):
     model = Project
     template_name = 'admin/dataset_upload.html'
 
@@ -108,7 +114,7 @@ class DatasetUpload(LoginRequiredMixin, TemplateView):
             return HttpResponseRedirect(reverse('dataset-upload', args=[project.id]))
 
 
-class DataDownload(View):
+class DataDownload(SuperUserMixin, View):
 
     def get(self, request, *args, **kwargs):
         project_id = self.kwargs['project_id']