Return permissions as part of scanner API status responses

This will make it possible for apps to prepopulate a list of conferences
and fields instead of having to add each one manually.

Author: mhagander

postgresqleu/confreg/checkin.py

@@ -24,6 +24,7 @@
 from .models import ConferenceRegistration
 from .util import render_conference_response, reglog
 from .util import get_conference_or_404
+from .util import get_conference_scanner_permissions
 
 import json
 
@@ -312,6 +313,7 @@ def _checkin_api(request, urlname, regtoken, what, tokenfield, tokenmatcher, fie
             'activestatus': 'Check-in active' if conference.checkinactive else 'Check-in is not open',
             'confname': conference.conferencename,
             'admin': is_admin,
+            'permissions': get_conference_scanner_permissions(user.attendee),
             **extrastatus
         })
 

postgresqleu/confreg/util.py

@@ -15,6 +15,7 @@
 import re
 
 from postgresqleu.mailqueue.util import send_simple_mail, send_template_mail
+from postgresqleu.util.db import exec_to_keyed_dict
 from postgresqleu.util.middleware import RedirectException
 from postgresqleu.util.time import today_conference
 from postgresqleu.util.messaging.util import send_org_notification
@@ -489,6 +490,34 @@ def get_conference_or_404(urlname):
     return conference
 
 
+def get_conference_scanner_permissions(user):
+    permissions = exec_to_keyed_dict("""SELECT conferencename AS name, startdate::text, true AS checkin,
+CASE WHEN scannerfields != '' THEN regexp_split_to_array(scannerfields, ',') ELSE '{}' END AS scannerfields,
+regtoken AS token
+FROM confreg_conference c
+INNER JOIN confreg_conferenceregistration r ON r.conference_id=c.id
+WHERE r.attendee_id=%(userid)s
+AND c.enddate > CURRENT_TIMESTAMP - '2 weeks'::interval
+AND EXISTS (SELECT 1 FROM confreg_conference_checkinprocessors cp WHERE cp.conference_id=c.id AND cp.conferenceregistration_id=r.id)
+""", {'userid': user.id})
+
+    for conf, data in exec_to_keyed_dict("""SELECT conferencename AS name, startdate::text, false as checkin,
+jsonb_agg(jsonb_build_object('sponsor', s.name, 'token', ss.token)) AS sponsors
+FROM confreg_conference c
+INNER JOIN confreg_conferenceregistration r ON r.conference_id=c.id
+INNER JOIN confsponsor_sponsorscanner ss ON ss.scanner_id=r.id
+INNER JOIN confsponsor_sponsor s ON s.id=ss.sponsor_id
+WHERE r.attendee_id=%(userid)s
+AND c.enddate > CURRENT_TIMESTAMP - '2 weeks'::interval
+GROUP BY 1, 2, 3
+""", {'userid': user.id}).items():
+        if conf in permissions:
+            permissions[conf]['sponsors'] = data['sponsors']
+        else:
+            permissions[conf] = data
+    return permissions
+
+
 def activate_conference_timezone(conference):
     timezone.activate(conference.tzname)
 

postgresqleu/confsponsor/scanning.py

@@ -16,6 +16,7 @@
 from postgresqleu.util.decorators import global_login_exempt
 from postgresqleu.confreg.models import ConferenceRegistration
 from postgresqleu.confreg.util import send_conference_mail, get_conference_or_404, render_conference_response
+from postgresqleu.confreg.util import get_conference_scanner_permissions
 
 from .views import _get_sponsor_and_admin, get_authenticated_conference
 from .models import SponsorScanner, ScannedAttendee
@@ -304,6 +305,7 @@ def scanning_api(request, scannertoken, what):
                 'active': True,  # As soon as badges are available they can be scanned.
                 'admin': False,  # There are no "admins" in badge scanning
                 'activestatus': '',
+                'permissions': get_conference_scanner_permissions(scanner.scanner.attendee),
             }), content_type='application/json')
         elif what == 'lookup':
             token = request.GET.get('lookup')