100 lines
2.8 KiB
Python
100 lines
2.8 KiB
Python
from typing import Any, List
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app import crud, models, schemas
|
|
from app.api import deps
|
|
|
|
router = APIRouter()
|
|
|
|
|
|
@router.get("/", response_model=List[schemas.Item])
|
|
def read_items(
|
|
db: Session = Depends(deps.get_db),
|
|
skip: int = 0,
|
|
limit: int = 100,
|
|
current_user: models.User = Depends(deps.get_current_active_user),
|
|
) -> Any:
|
|
"""
|
|
Retrieve items.
|
|
"""
|
|
if crud.user.is_superuser(current_user):
|
|
items = crud.item.get_multi(db, skip=skip, limit=limit)
|
|
else:
|
|
items = crud.item.get_multi_by_owner(
|
|
db=db, owner_id=current_user.id, skip=skip, limit=limit
|
|
)
|
|
return items
|
|
|
|
|
|
@router.post("/", response_model=schemas.Item)
|
|
def create_item(
|
|
*,
|
|
db: Session = Depends(deps.get_db),
|
|
item_in: schemas.ItemCreate,
|
|
current_user: models.User = Depends(deps.get_current_active_user),
|
|
) -> Any:
|
|
"""
|
|
Create new item.
|
|
"""
|
|
item = crud.item.create_with_owner(db=db, obj_in=item_in, owner_id=current_user.id)
|
|
return item
|
|
|
|
|
|
@router.put("/{id}", response_model=schemas.Item)
|
|
def update_item(
|
|
*,
|
|
db: Session = Depends(deps.get_db),
|
|
id: int,
|
|
item_in: schemas.ItemUpdate,
|
|
current_user: models.User = Depends(deps.get_current_active_user),
|
|
) -> Any:
|
|
"""
|
|
Update an item.
|
|
"""
|
|
item = crud.item.get(db=db, id=id)
|
|
if not item:
|
|
raise HTTPException(status_code=404, detail="Item not found")
|
|
if not crud.user.is_superuser(current_user) and (item.owner_id != current_user.id):
|
|
raise HTTPException(status_code=400, detail="Not enough permissions")
|
|
item = crud.item.update(db=db, db_obj=item, obj_in=item_in)
|
|
return item
|
|
|
|
|
|
@router.get("/{id}", response_model=schemas.Item)
|
|
def read_item(
|
|
*,
|
|
db: Session = Depends(deps.get_db),
|
|
id: int,
|
|
current_user: models.User = Depends(deps.get_current_active_user),
|
|
) -> Any:
|
|
"""
|
|
Get item by ID.
|
|
"""
|
|
item = crud.item.get(db=db, id=id)
|
|
if not item:
|
|
raise HTTPException(status_code=404, detail="Item not found")
|
|
if not crud.user.is_superuser(current_user) and (item.owner_id != current_user.id):
|
|
raise HTTPException(status_code=400, detail="Not enough permissions")
|
|
return item
|
|
|
|
|
|
@router.delete("/{id}", response_model=schemas.Item)
|
|
def delete_item(
|
|
*,
|
|
db: Session = Depends(deps.get_db),
|
|
id: int,
|
|
current_user: models.User = Depends(deps.get_current_active_user),
|
|
) -> Any:
|
|
"""
|
|
Delete an item.
|
|
"""
|
|
item = crud.item.get(db=db, id=id)
|
|
if not item:
|
|
raise HTTPException(status_code=404, detail="Item not found")
|
|
if not crud.user.is_superuser(current_user) and (item.owner_id != current_user.id):
|
|
raise HTTPException(status_code=400, detail="Not enough permissions")
|
|
item = crud.item.remove(db=db, id=id)
|
|
return item
|