server-tools/auth_dynamic_groups/model/res_users.py

# -*- coding: utf-8 -*-
##############################################################################
#
#    OpenERP, Open Source Management Solution
#    This module copyright (C) 2013 Therp BV (<http://therp.nl>).
#
#    This program is free software: you can redistribute it and/or modify
#    it under the terms of the GNU Affero General Public License as
#    published by the Free Software Foundation, either version 3 of the
#    License, or (at your option) any later version.
#
#    This program is distributed in the hope that it will be useful,
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#    GNU Affero General Public License for more details.
#
#    You should have received a copy of the GNU Affero General Public License
#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
##############################################################################
from openerp.models import Model
from openerp import SUPERUSER_ID


class ResUsers(Model):
    _inherit = 'res.users'

    def _login(self, db, login, password):
        uid = super(ResUsers, self)._login(db, login, password)

        if uid and uid != SUPERUSER_ID:
            self.update_dynamic_groups(uid, db)

        return uid

    def update_dynamic_groups(self, uid, db):
        cr = self.pool._db.cursor(serialized=False)
        groups_obj = self.pool.get('res.groups')
        try:
            dynamic_groups = groups_obj.browse(
                cr, SUPERUSER_ID, groups_obj.search(
                    cr, SUPERUSER_ID, [('is_dynamic', '=', True)]))
            if dynamic_groups:
                cr.execute(
                    'delete from res_groups_users_rel '
                    'where uid=%s and gid in %s',
                    (uid, tuple(dynamic_groups.ids))
                )
            for dynamic_group in dynamic_groups:
                if dynamic_group.eval_dynamic_group_condition(uid=uid):
                    cr.execute(
                        'insert into res_groups_users_rel (uid, gid) values '
                        '(%s, %s)',
                        (uid, dynamic_group.id))
            self.invalidate_cache(cr, uid, ['groups_id'], [uid])
            # we really need a new transaction
            # pylint: disable=invalid-commit
            cr.commit()
        finally:
            cr.close()