update order list serializer add get order view and its permission

backend/order/migrations/0021_ordermodel_tax_alter_ordermodel_status.py

@@ -0,0 +1,23 @@
+# Generated by Django 5.1.2 on 2025-03-17 12:15
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('order', '0020_rename_bank_record_ordermodel_bank_records'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='ordermodel',
+            name='tax',
+            field=models.BigIntegerField(blank=True, null=True, verbose_name='مالیات'),
+        ),
+        migrations.AlterField(
+            model_name='ordermodel',
+            name='status',
+            field=models.CharField(choices=[('CART', 'در سبد خرید'), ('ADMIN_PENDING', 'در انتظار تایید'), ('PENDING', 'درحال پردازش'), ('POSTED', 'ارسال شده'), ('RECEIVED', 'تحویل شده'), ('CANCELED', 'لغو شده'), ('REFUNDED', 'مرجوع شده')], max_length=20, verbose_name='وضعیت سفارش'),
+        ),
+    ]

backend/order/migrations/0022_ordermodel_discount_ordermodel_final_price.py

@@ -0,0 +1,23 @@
+# Generated by Django 5.1.2 on 2025-03-17 12:15
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('order', '0021_ordermodel_tax_alter_ordermodel_status'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='ordermodel',
+            name='discount',
+            field=models.BigIntegerField(blank=True, null=True, verbose_name='کل تخقیف'),
+        ),
+        migrations.AddField(
+            model_name='ordermodel',
+            name='final_price',
+            field=models.BigIntegerField(blank=True, null=True, verbose_name='قیمت نهایی'),
+        ),
+    ]

backend/order/models.py

@@ -59,7 +59,7 @@ class OrderModel(models.Model):
     bank_records = models.ManyToManyField(Bank, max_length=100, verbose_name='رکورد بانکی', null=True, blank=True)
     
     def __str__(self):
-        return f'سفارش: {self.id}'
+        return f'سفارش: {self.id + 1000}'
 
     class Meta:
         verbose_name = 'سفارش'
@@ -80,27 +80,27 @@ class OrderModel(models.Model):
 
 
 
-    def discount(self):
-        # total_with_item_discount = sum(item.total_with_discount() for item in self.items.all())
-        # discount_percent = self.discount_code.percent
-        # return total_with_item_discount * ((100 - discount_percent) / 100)
-        pass
+    # def discount(self):
+    #     # total_with_item_discount = sum(item.total_with_discount() for item in self.items.all())
+    #     # discount_percent = self.discount_code.percent
+    #     # return total_with_item_discount * ((100 - discount_percent) / 100)
+    #     pass
 
 
-    def tax(self):
-        return self.total_without_tax() * 0.2
+    # def tax(self):
+    #     return self.total_without_tax() * 0.2
     
 
-    def total(self):
-        pass
+    # def total(self):
+    #     pass
         # return self.total_with_discount() + self.tax()
 
 
-    def final_price(self):
-        pass
+    # def final_price(self):
+    #     pass
 
-    def submit_cart(self):
-        pass
+    # def submit_cart(self):
+    #     pass
 
 
 

backend/order/permissons.py

@@ -1,7 +1,7 @@
 from rest_framework.permissions import BasePermission
 
 class CanDeleteCartItemPermissions(BasePermission):
-    message = "شما دسترسی حذف این ایتم رو ندارید"
+    message = "شما دسترسی حذف این ایتم را ندارید"
 
     def has_object_permission(self, request, view, obj):
         if obj.order.user != request.user:
@@ -12,4 +12,15 @@ class CanDeleteCartItemPermissions(BasePermission):
             self.message = "وضعیت سفارش سبد خرید نیست و آیتمی را نمی‌توانید حذف کنید."
             return False
         
+        return True
+        
+
+class GetOrderPermission(BasePermission):
+    message = "شما دسترسی به این سفارش را ندارید"
+    def has_object_permission(self, request, view, obj):
+        if obj.user != request.user:
+            return False
+        if obj.status != 'CART':
+            self.message = "سفارش در وضعیت سبد خرید است"
+            return False
         return True

backend/order/serializers.py

@@ -78,21 +78,17 @@ class CartSerializer(serializers.ModelSerializer):
             return None
 
 
-
-
-
     def get_tax(self, obj):
         return f'{1000:,.0f} تومان'
 
     def get_cart_total(self, obj):
-
         return f'{10000:,.0f} تومان'
-    def get_final_price(self, obj):
 
+    def get_final_price(self, obj):
         return f'{8000:,.0f} تومان'
     
 
-class OrderSerializer(serializers.ModelSerializer):
+class OrderListSerializer(serializers.ModelSerializer):
     count =  serializers.SerializerMethodField()
     images =  serializers.SerializerMethodField()
     order_id = serializers.SerializerMethodField()
@@ -100,6 +96,35 @@ class OrderSerializer(serializers.ModelSerializer):
     class Meta:
         model = OrderModel
         fields = ['created_at', 'status',  "images", "count", "id", 'final_price', 'order_id', 'verbose_status']
+        read_only_fields = ['count', 'images', 'order_id', 'verbose_status']
+    def get_verbose_status(self, obj):
+        return obj.get_status_display()
+
+    def get_count(self, obj):
+        return obj.items.all().count()
+
+    def get_images(self, obj):
+        image_list = [
+            self.context.get('request').build_absolute_uri(image.image.url)
+            if (image := item.product.images.all().first()) else None
+            for item in obj.items.all()[:3]
+        ]
+        return filter(lambda x: x is not None, image_list)
+    def get_order_id(self, obj):
+        return obj.id + 1000
+
+
+class OrderGetSerializer(serializers.ModelSerializer):
+    count =  serializers.SerializerMethodField()
+    images =  serializers.SerializerMethodField()
+    order_id = serializers.SerializerMethodField()
+    verbose_status = serializers.SerializerMethodField()
+    items = OrderItemSerailzier(many=True)
+    address = UserAddressSerializer()
+    discount_code = DiscountCodeSerializer()
+    class Meta:
+        model = OrderModel
+        fields = ['created_at', 'status',  "images", "count", "id", 'final_price', 'order_id', 'verbose_status', 'address', 'items', 'tax' , 'cart_total', 'discount_code', 'discount']
 
     def get_verbose_status(self, obj):
         return obj.get_status_display()

backend/order/urls.py

@@ -1,7 +1,7 @@
 from django.conf.urls.static import static
 from django.contrib import admin
 from django.urls import path, include
-from .views import CartItemViews, CartView, OrderlistView, CartItemClear, ApplyDiscountView
+from .views import CartItemViews, CartView, OrderlistView, CartItemClear, ApplyDiscountView, OrderGetView
 from .views import PaymentView, callback_view
 
 urlpatterns = [
@@ -12,4 +12,5 @@ urlpatterns = [
     path('cart/item/<int:pk>', CartItemViews.as_view(), name='change-item-cart'),
     path('payment', PaymentView.as_view(), name='payment'),
     path('callback', callback_view, name='callback-gateway'),
+    path('<int:pk>', OrderGetView.as_view(), name='order-get'),
 ]

backend/order/views.py

@@ -8,7 +8,7 @@ from .serializers import *
 # from cart.models import 
 from rest_framework import status
 from .models import OrderItemModel, OrderModel, DiscountCode
-from .permissons import CanDeleteCartItemPermissions
+from .permissons import CanDeleteCartItemPermissions, GetOrderPermission
 from azbankgateways import bankfactories, models as bank_models
 from azbankgateways.exceptions import AZBankGatewaysException
 from drf_spectacular.utils import extend_schema, OpenApiParameter, OpenApiTypes
@@ -115,7 +115,7 @@ class CartView(APIView):
 
 class OrderlistView(APIView):
     permission_classes = [IsAuthenticated]
-    serializer_class = OrderSerializer
+    serializer_class = OrderListSerializer
     pagination_class = StructurePagination
     @extend_schema(
         parameters=[
@@ -169,6 +169,20 @@ class OrderlistView(APIView):
 
 
 
+class OrderGetView(APIView):
+    permission_classes = [IsAuthenticated, GetOrderPermission]
+    serializer_class = OrderGetSerializer
+    def get(self, request, pk):
+        order_object = get_object_or_404(OrderModel, pk=pk)
+
+
+        permission = GetOrderPermission()
+        if not permission.has_object_permission(request, self, order_object):
+            return Response({"detail": permission.message}, status=status.HTTP_403_FORBIDDEN)
+
+
+        order_ser = self.serializer_class(order_object, context={'request': request})
+        return Response(order_ser.data, status=status.HTTP_200_OK)
 
 class PaymentView(APIView):
     permission_classes = [IsAuthenticated]