Merge branch 'core-demo' into product-dev

app/applicationlayer/download/accounts/views.py

@@ -5,13 +5,11 @@ from drf_renderer_xlsx.renderers import XLSXRenderer
 from app.entities.models import (
     User
 )
-# from app.applicationlayer.form_listing_ import headers
 from app.applicationlayer.download.accounts.serializers import headers
 from django.db.models import CharField, Value
 from django.db.models import Q
 from rest_framework.response import Response
 from rest_framework.permissions import AllowAny
-# from cms.applicationlayer.utilities import logged_user
 from rest_framework.exceptions import ParseError
 from rest_framework import status
 
@@ -25,9 +23,25 @@ class UserDownloadRequest(XLSXFileMixin, ReadOnlyModelViewSet):
     
     def list(self, request, *args, **kwargs):
 
-        # id_number = self.request.user
+        user_type = self.request.user.user_type
+        company = self.request.user.department.company.code
+        department = self.request.user.department.code
         
-        data = User.objects.all().exclude(id=1)
+        if user_type == 'CUA':
+            data = User.objects.filter(
+                department__company=company).exclude(id=1)
+        elif user_type == 'DUA':
+            data = User.objects.filter(
+                department=department).exclude(id=1)
+        elif user_type == 'SU':
+            data = User.objects.all().exclude(id=1)
+        elif user_type == 'OUA':
+            data = User.objects.all().exclude(id=1)
+        else:
+            return Response(
+                        {"message": "Logged user is unauthorize to access this section"},
+                        status=status.HTTP_400_BAD_REQUEST
+                    )
         
         serializer = headers(data=data, many=True)
         serializer.is_valid(raise_exception=False)