add super user flag

lavocat/api/v1/attendances/views.py

@@ -1,3 +1,4 @@
+from django.utils.datetime_safe import datetime
 from django_filters.rest_framework import DjangoFilterBackend
 from rest_framework import viewsets, views
 from rest_framework.response import Response
@@ -29,6 +30,12 @@ class AttendanceViewSet(viewsets.ModelViewSet):
     filter_backends = [DjangoFilterBackend]
     filterset_class = AttendanceFilter
 
+    def get_queryset(self):
+        if not self.request.user.is_superuser:
+            date = datetime(year=2024, month=5, day=23)
+            return super().get_queryset().filter(created_at__lte=date)
+        return super().get_queryset()
+
 
 class AttendanceFileViewSet(viewsets.ModelViewSet):
     queryset = AttendanceFile.objects.all()

lavocat/api/v1/core/serializers.py

@@ -0,0 +1,10 @@
+from rest_framework_simplejwt.serializers import TokenObtainPairSerializer
+
+
+class CustomTokenObtainPairSerializer(TokenObtainPairSerializer):
+    def validate(self, attrs):
+        data = super().validate(attrs)
+
+        data['is_superuser'] = self.user.is_superuser
+
+        return data

lavocat/api/v1/core/urls.py

@@ -1,7 +1,7 @@
 from django.urls import path
-from rest_framework_simplejwt import views as jwt_views
 
+from lavocat.api.v1.core.views import TokenObtainPairView
 
 urlpatterns = [
-    path('api/token/', jwt_views.TokenObtainPairView.as_view(), name='jwt-auth'),
+    path('api/token/', TokenObtainPairView.as_view(), name='jwt-auth'),
 ]

lavocat/api/v1/core/views.py

@@ -0,0 +1,12 @@
+from rest_framework_simplejwt.views import TokenViewBase
+
+from lavocat.api.v1.core.serializers import CustomTokenObtainPairSerializer
+
+
+class TokenObtainPairView(TokenViewBase):
+    """
+    Takes a set of user credentials and returns an access and refresh JSON web
+    token pair to prove the authentication of those credentials.
+    """
+
+    serializer_class = CustomTokenObtainPairSerializer