This commit is contained in:
Markos Gogoulos
2025-12-29 20:02:55 +02:00
parent e9e5d44c3e
commit 9c145da2e2
4 changed files with 83 additions and 55 deletions

View File

@@ -4,6 +4,7 @@ from cms.version import VERSION
from .frontend_translations import get_translation, get_translation_strings
from .methods import is_mediacms_editor, is_mediacms_manager
from .models import Category
def stuff(request):
@@ -64,4 +65,26 @@ def stuff(request):
if request.user.is_superuser:
ret["DJANGO_ADMIN_URL"] = settings.DJANGO_ADMIN_URL
# LTI Integration: Add category UID for LTI-authenticated users
if getattr(settings, 'USE_LTI', False):
# Check if user has an active LTI session
lti_session = request.session.get('lti_session')
if lti_session and request.user.is_authenticated:
ret['lti_session'] = lti_session
# Get the category for this LTI context via lti_platform and lti_context_id
platform_id = lti_session.get('platform_id')
context_id = lti_session.get('context_id')
if platform_id and context_id:
try:
# Look up category by LTI platform and context
category = Category.objects.get(lti_platform_id=platform_id, lti_context_id=context_id)
# Check if user has permission to upload to this category
if request.user.has_upload_access_to_category(category):
ret['lti_category_uid'] = category.uid
except Category.DoesNotExist:
pass
return ret

View File

@@ -272,7 +272,23 @@ class MediaList(APIView):
serializer = MediaSerializer(data=request.data, context={"request": request})
if serializer.is_valid():
media_file = request.data["media_file"]
serializer.save(user=request.user, media_file=media_file)
media = serializer.save(user=request.user, media_file=media_file)
# Handle LTI category assignment if publish_to_category parameter is provided
publish_to_category = request.data.get('publish_to_category', '').strip()
if publish_to_category:
from ..models import Category
try:
category = Category.objects.get(uid=publish_to_category)
# Check if user has upload access to this category
if request.user.has_upload_access_to_category(category):
media.category.add(category)
except Category.DoesNotExist:
# Category doesn't exist, silently ignore
pass
return Response(serializer.data, status=status.HTTP_201_CREATED)
return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)