Fix permission management

* improve ObjectPermBackend
* change permission right from wizard to groups
* remove default to administrator
* add default data for french person_types

1 files changed, 361 insertions, 0 deletions

diff --git a/ishtar_common/fixtures/groups_person_types-SRA-fr.json b/ishtar_common/fixtures/groups_person_types-SRA-fr.json
new file mode 100644
index 000000000..e758bd645
--- /dev/null
+++ b/ishtar_common/fixtures/groups_person_types-SRA-fr.json
@@ -0,0 +1,361 @@
+[
+    {
+        "pk": 2,
+        "model": "auth.group",
+        "fields": {
+            "name": "Dossiers : voir",
+            "permissions": [
+                241
+            ]
+        }
+    },
+    {
+        "pk": 1,
+        "model": "auth.group",
+        "fields": {
+            "name": "Op\u00e9rations : voir",
+            "permissions": [
+                245
+            ]
+        }
+    },
+    {
+        "pk": 4,
+        "model": "auth.group",
+        "fields": {
+            "name": "UEs : voir",
+            "permissions": [
+                243
+            ]
+        }
+    },
+    {
+        "pk": 3,
+        "model": "auth.group",
+        "fields": {
+            "name": "Utilisateurs : voir",
+            "permissions": [
+                56
+            ]
+        }
+    },
+    {
+        "pk": 5,
+        "model": "auth.group",
+        "fields": {
+            "name": "D\u00e9p\u00f4ts : voir",
+            "permissions": [
+                248
+            ]
+        }
+    },
+    {
+        "pk": 7,
+        "model": "auth.group",
+        "fields": {
+            "name": "Traitements : voir",
+            "permissions": [
+                247
+            ]
+        }
+    },
+    {
+        "pk": 6,
+        "model": "auth.group",
+        "fields": {
+            "name": "Mobilier : voir",
+            "permissions": [
+                242,
+                244
+            ]
+        }
+    },
+    {
+        "pk": 8,
+        "model": "auth.group",
+        "fields": {
+            "name": "Actes administratifs : voir",
+            "permissions": [
+                240
+            ]
+        }
+    },
+    {
+        "pk": 9,
+        "model": "auth.group",
+        "fields": {
+            "name": "Actes administratifs : ajout",
+            "permissions": [
+                135
+            ]
+        }
+    },
+    {
+        "pk": 10,
+        "model": "auth.group",
+        "fields": {
+            "name": "Actes administratifs : modification/suppression",
+            "permissions": [
+                136,
+                137
+            ]
+        }
+    },
+    {
+        "pk": 11,
+        "model": "auth.group",
+        "fields": {
+            "name": "D\u00e9p\u00f4ts : ajout",
+            "permissions": [
+                182
+            ]
+        }
+    },
+    {
+        "pk": 12,
+        "model": "auth.group",
+        "fields": {
+            "name": "D\u00e9p\u00f4ts : modification/suppression",
+            "permissions": [
+                183,
+                184
+            ]
+        }
+    },
+    {
+        "pk": 13,
+        "model": "auth.group",
+        "fields": {
+            "name": "Dossiers : ajout",
+            "permissions": [
+                94
+            ]
+        }
+    },
+    {
+        "pk": 14,
+        "model": "auth.group",
+        "fields": {
+            "name": "Dossiers : modification/suppression",
+            "permissions": [
+                95,
+                96
+            ]
+        }
+    },
+    {
+        "pk": 15,
+        "model": "auth.group",
+        "fields": {
+            "name": "Mobilier : ajout",
+            "permissions": [
+                201,
+                211
+            ]
+        }
+    },
+    {
+        "pk": 16,
+        "model": "auth.group",
+        "fields": {
+            "name": "Mobilier : modification/suppression",
+            "permissions": [
+                202,
+                203,
+                212,
+                213
+            ]
+        }
+    },
+    {
+        "pk": 17,
+        "model": "auth.group",
+        "fields": {
+            "name": "Op\u00e9rations : ajout",
+            "permissions": [
+                116
+            ]
+        }
+    },
+    {
+        "pk": 18,
+        "model": "auth.group",
+        "fields": {
+            "name": "Op\u00e9rations : modification/suppression",
+            "permissions": [
+                117,
+                118
+            ]
+        }
+    },
+    {
+        "pk": 19,
+        "model": "auth.group",
+        "fields": {
+            "name": "Traitements : ajout",
+            "permissions": [
+                227
+            ]
+        }
+    },
+    {
+        "pk": 20,
+        "model": "auth.group",
+        "fields": {
+            "name": "Traitements : modification/suppression",
+            "permissions": [
+                228,
+                229
+            ]
+        }
+    },
+    {
+        "pk": 21,
+        "model": "auth.group",
+        "fields": {
+            "name": "UEs : ajout",
+            "permissions": [
+                169
+            ]
+        }
+    },
+    {
+        "pk": 22,
+        "model": "auth.group",
+        "fields": {
+            "name": "UEs : modification/suppression",
+            "permissions": [
+                170,
+                171
+            ]
+        }
+    },
+    {
+        "pk": 23,
+        "model": "auth.group",
+        "fields": {
+            "name": "Utilisateurs : ajout",
+            "permissions": [
+                53
+            ]
+        }
+    },
+    {
+        "pk": 24,
+        "model": "auth.group",
+        "fields": {
+            "name": "Utilisateurs : modification/suppression",
+            "permissions": [
+                54,
+                55
+            ]
+        }
+    },
+    {
+        "pk": 7,
+        "model": "ishtar_common.persontype",
+        "fields": {
+            "comment": "Un acc\u00e8s limit\u00e9 \u00e0 la base, uniquement en lecture. Apr\u00e8s enregistrement.",
+            "available": true,
+            "txt_idx": "public_access",
+            "groups": [],
+            "label": "Acc\u00e8s public"
+        }
+    },
+    {
+        "pk": 1,
+        "model": "ishtar_common.persontype",
+        "fields": {
+            "comment": "",
+            "available": true,
+            "txt_idx": "administrator",
+            "groups": [],
+            "label": "Administrateur"
+        }
+    },
+    {
+        "pk": 3,
+        "model": "ishtar_common.persontype",
+        "fields": {
+            "comment": "Responsables de dossiers d'arch\u00e9ologie",
+            "available": true,
+            "txt_idx": "sra_agent",
+            "groups": [
+                1,
+                2,
+                4,
+                5,
+                6,
+                7,
+                8,
+                9,
+                10,
+                13,
+                14,
+                15,
+                16,
+                17,
+                18,
+                21,
+                22
+            ],
+            "label": "Agent SRA (prescripteur)"
+        }
+    },
+    {
+        "pk": 6,
+        "model": "ishtar_common.persontype",
+        "fields": {
+            "comment": "Responsable de l'am\u00e9nagement",
+            "available": true,
+            "txt_idx": "general_contractor",
+            "groups": [],
+            "label": "Am\u00e9nageur"
+        }
+    },
+    {
+        "pk": 5,
+        "model": "ishtar_common.persontype",
+        "fields": {
+            "comment": "Cette personne peut g\u00e9rer du mobilier qu'il n'a pas cr\u00e9\u00e9\r\n\r\n",
+            "available": true,
+            "txt_idx": "warehouse_manager",
+            "groups": [],
+            "label": "Gestionnaire de d\u00e9p\u00f4t"
+        }
+    },
+    {
+        "pk": 2,
+        "model": "ishtar_common.persontype",
+        "fields": {
+            "comment": "Article 13 D\u00e9cret 2004\r\n\r\nLe pr\u00e9fet de r\u00e9gion \u00e9dicte les prescriptions arch\u00e9ologiques, d\u00e9livre l'autorisation de fouille et d\u00e9signe le responsable scientifique de toute op\u00e9ration d'arch\u00e9ologie pr\u00e9ventive.\r\n\r\nLe responsable scientifique est l'interlocuteur du pr\u00e9fet de r\u00e9gion et le garant de la qualit\u00e9 scientifique de l'op\u00e9ration arch\u00e9ologique. A ce titre, il prend, dans le cadre de la mise en oeuvre du projet d'intervention de l'op\u00e9rateur, les d\u00e9cisions relatives \u00e0 la conduite scientifique de l'op\u00e9ration et \u00e0 l'\u00e9laboration du rapport dont il dirige la r\u00e9daction. Il peut \u00eatre diff\u00e9rent pour la r\u00e9alisation du diagnostic et pour la r\u00e9alisation de la fouille.",
+            "available": true,
+            "txt_idx": "head_scientist",
+            "groups": [],
+            "label": "Responsable scientifique"
+        }
+    },
+    {
+        "pk": 4,
+        "model": "ishtar_common.persontype",
+        "fields": {
+            "comment": "Acc\u00e8s pour les secr\u00e9taires d'un SRA",
+            "available": true,
+            "txt_idx": "secretarial_dept",
+            "groups": [
+                1,
+                2,
+                6,
+                7,
+                8,
+                9,
+                10,
+                13,
+                14,
+                17,
+                18
+            ],
+            "label": "Secr\u00e9tariat SRA"
+        }
+    }
+]
\ No newline at end of file