PyRIGS/RIGS/urls.py

from django.urls import path
from django.conf.urls import url
from django.contrib.auth.decorators import login_required
from RIGS import models, views, rigboard, finance, ical, versioning, forms
from django.views.generic import RedirectView
from django.views.decorators.clickjacking import xframe_options_exempt

from PyRIGS.decorators import permission_required_with_403, has_oembed
from PyRIGS.decorators import api_key_required

urlpatterns = [
    path('', login_required(views.Index.as_view()), name='index'),
    url(r'^closemodal/$', views.CloseModal.as_view(), name='closemodal'),

    url(r'^search_help/$', views.SearchHelp.as_view(), name='search_help'),

    # People
    url(r'^people/$', permission_required_with_403('RIGS.view_person')(views.PersonList.as_view()),
        name='person_list'),
    url(r'^people/add/$',
        permission_required_with_403('RIGS.add_person')(views.PersonCreate.as_view()),
        name='person_create'),
    url(r'^people/(?P<pk>\d+)/$',
        permission_required_with_403('RIGS.view_person')(views.PersonDetail.as_view()),
        name='person_detail'),
    url(r'^people/(?P<pk>\d+)/history/$',
        permission_required_with_403('RIGS.view_person')(versioning.VersionHistory.as_view()),
        name='person_history', kwargs={'model': models.Person}),
    url(r'^people/(?P<pk>\d+)/edit/$',
        permission_required_with_403('RIGS.change_person')(views.PersonUpdate.as_view()),
        name='person_update'),

    # Organisations
    url(r'^organisations/$',
        permission_required_with_403('RIGS.view_organisation')(views.OrganisationList.as_view()),
        name='organisation_list'),
    url(r'^organisations/add/$',
        permission_required_with_403('RIGS.add_organisation')(views.OrganisationCreate.as_view()),
        name='organisation_create'),
    url(r'^organisations/(?P<pk>\d+)/$',
        permission_required_with_403('RIGS.view_organisation')(views.OrganisationDetail.as_view()),
        name='organisation_detail'),
    url(r'^organisations/(?P<pk>\d+)/history/$',
        permission_required_with_403('RIGS.view_organisation')(versioning.VersionHistory.as_view()),
        name='organisation_history', kwargs={'model': models.Organisation}),
    url(r'^organisations/(?P<pk>\d+)/edit/$',
        permission_required_with_403('RIGS.change_organisation')(views.OrganisationUpdate.as_view()),
        name='organisation_update'),

    # Venues
    url(r'^venues/$',
        permission_required_with_403('RIGS.view_venue')(views.VenueList.as_view()),
        name='venue_list'),
    url(r'^venues/add/$',
        permission_required_with_403('RIGS.add_venue')(views.VenueCreate.as_view()),
        name='venue_create'),
    url(r'^venues/(?P<pk>\d+)/$',
        permission_required_with_403('RIGS.view_venue')(views.VenueDetail.as_view()),
        name='venue_detail'),
    url(r'^venues/(?P<pk>\d+)/history/$',
        permission_required_with_403('RIGS.view_venue')(versioning.VersionHistory.as_view()),
        name='venue_history', kwargs={'model': models.Venue}),
    url(r'^venues/(?P<pk>\d+)/edit/$',
        permission_required_with_403('RIGS.change_venue')(views.VenueUpdate.as_view()),
        name='venue_update'),

    # Rigboard
    url(r'^rigboard/$', login_required(rigboard.RigboardIndex.as_view()), name='rigboard'),
    url(r'^rigboard/calendar/$', login_required()(rigboard.WebCalendar.as_view()),
        name='web_calendar'),
    url(r'^rigboard/calendar/(?P<view>(month|week|day))/$',
        login_required()(rigboard.WebCalendar.as_view()), name='web_calendar'),
    url(r'^rigboard/calendar/(?P<view>(month|week|day))/(?P<date>(\d{4}-\d{2}-\d{2}))/$',
        login_required()(rigboard.WebCalendar.as_view()), name='web_calendar'),
    url(r'^rigboard/archive/$', RedirectView.as_view(permanent=True, pattern_name='event_archive')),
    url(r'^rigboard/activity/$',
        permission_required_with_403('RIGS.view_event')(versioning.ActivityTable.as_view()),
        name='activity_table'),
    url(r'^rigboard/activity/feed/$',
        permission_required_with_403('RIGS.view_event')(versioning.ActivityFeed.as_view()),
        name='activity_feed'),

    url(r'^event/(?P<pk>\d+)/$', has_oembed(oembed_view="event_oembed")(
            rigboard.EventDetail.as_view()),
        name='event_detail'),
    url(r'^event/(?P<pk>\d+)/embed/$',
        xframe_options_exempt(
            login_required(login_url='/user/login/embed/')(rigboard.EventEmbed.as_view())),
        name='event_embed'),
    url(r'^event/(?P<pk>\d+)/oembed_json/$',
        rigboard.EventOembed.as_view(),
        name='event_oembed'),
    url(r'^event/(?P<pk>\d+)/print/$',
        permission_required_with_403('RIGS.view_event')(rigboard.EventPrint.as_view()),
        name='event_print'),
    url(r'^event/(?P<pk>\d+)/ra/$',
        permission_required_with_403('RIGS.change_event')(rigboard.EventRA.as_view()),
        name='event_ra'),
    url(r'^event/create/$',
        permission_required_with_403('RIGS.add_event')(rigboard.EventCreate.as_view()),
        name='event_create'),
    url(r'^event/(?P<pk>\d+)/edit/$',
        permission_required_with_403('RIGS.change_event')(rigboard.EventUpdate.as_view()),
        name='event_update'),
    url(r'^event/(?P<pk>\d+)/duplicate/$',
        permission_required_with_403('RIGS.add_event')(rigboard.EventDuplicate.as_view()),
        name='event_duplicate'),
    url(r'^event/archive/$', login_required()(rigboard.EventArchive.as_view()),
        name='event_archive'),

    url(r'^event/(?P<pk>\d+)/history/$',
        permission_required_with_403('RIGS.view_event')(versioning.VersionHistory.as_view()),
        name='event_history', kwargs={'model': models.Event}),

    # Finance
    url(r'^invoice/$',
        permission_required_with_403('RIGS.view_invoice')(finance.InvoiceIndex.as_view()),
        name='invoice_list'),
    url(r'^invoice/archive/$',
        permission_required_with_403('RIGS.view_invoice')(finance.InvoiceArchive.as_view()),
        name='invoice_archive'),
    url(r'^invoice/waiting/$',
        permission_required_with_403('RIGS.add_invoice')(finance.InvoiceWaiting.as_view()),
        name='invoice_waiting'),

    url(r'^event/(?P<pk>\d+)/invoice/$',
        permission_required_with_403('RIGS.add_invoice')(finance.InvoiceEvent.as_view()),
        name='invoice_event'),

    url(r'^invoice/(?P<pk>\d+)/$',
        permission_required_with_403('RIGS.view_invoice')(finance.InvoiceDetail.as_view()),
        name='invoice_detail'),
    url(r'^invoice/(?P<pk>\d+)/print/$',
        permission_required_with_403('RIGS.view_invoice')(finance.InvoicePrint.as_view()),
        name='invoice_print'),
    url(r'^invoice/(?P<pk>\d+)/void/$',
        permission_required_with_403('RIGS.change_invoice')(finance.InvoiceVoid.as_view()),
        name='invoice_void'),
    url(r'^invoice/(?P<pk>\d+)/delete/$',
        permission_required_with_403('RIGS.change_invoice')(finance.InvoiceDelete.as_view()),
        name='invoice_delete'),
    url(r'^payment/create/$',
        permission_required_with_403('RIGS.add_payment')(finance.PaymentCreate.as_view()),
        name='payment_create'),
    url(r'^payment/(?P<pk>\d+)/delete/$',
        permission_required_with_403('RIGS.add_payment')(finance.PaymentDelete.as_view()),
        name='payment_delete'),

    # Client event authorisation
    url(r'^event/(?P<pk>\d+)/auth/$',
        permission_required_with_403('RIGS.change_event')(
            rigboard.EventAuthorisationRequest.as_view()
        ),
        name='event_authorise_request'),
    url(r'^event/(?P<pk>\d+)/auth/preview/$',
        permission_required_with_403('RIGS.change_event')(
            rigboard.EventAuthoriseRequestEmailPreview.as_view()
        ),
        name='event_authorise_preview'),
    url(r'^event/(?P<pk>\d+)/(?P<hmac>[-:\w]+)/$', rigboard.EventAuthorise.as_view(),
        name='event_authorise'),

    # ICS Calendar - API key authentication
    url(r'^ical/(?P<api_pk>\d+)/(?P<api_key>\w+)/rigs.ics$', api_key_required(ical.CalendarICS()),
        name="ics_calendar"),

    # API
    url(r'^api/(?P<model>\w+)/$', login_required(views.SecureAPIRequest.as_view()),
        name="api_secure"),
    url(r'^api/(?P<model>\w+)/(?P<pk>\d+)/$', login_required(views.SecureAPIRequest.as_view()),
        name="api_secure"),

    # Risk assessment API
    url(r'^log_risk_assessment/$', rigboard.LogRiskAssessment.as_view(), name='log_risk_assessment'),

    # Legacy URL's
    url(r'^rig/show/(?P<pk>\d+)/$',
        RedirectView.as_view(permanent=True, pattern_name='event_detail')),
    url(r'^bookings/$', RedirectView.as_view(permanent=True, pattern_name='rigboard')),
    url(r'^bookings/past/$', RedirectView.as_view(permanent=True, pattern_name='event_archive')),
]