chg ! admin panel - process deduplication set - is root

src/hope_dedup_engine/apps/api/admin/deduplicationset.py

@@ -10,6 +10,7 @@
 
 from hope_dedup_engine.apps.api.models import DeduplicationSet
 from hope_dedup_engine.apps.api.utils.process import start_processing
+from hope_dedup_engine.utils.security import is_root
 
 
 @register(DeduplicationSet)
@@ -45,11 +46,12 @@ class DeduplicationSetAdmin(AdminFiltersMixin, ExtraButtonsMixin, ModelAdmin):
     def has_add_permission(self, request):
         return False
 
-    @button(label="Process")
+    @button(permission=is_root)
     def process(self, request: HttpRequest, pk: str) -> HttpResponseRedirect:
         dd = DeduplicationSet.objects.get(pk=pk)
         start_processing(dd)
         self.message_user(
-            request, f"Processing for deduplication set '{dd}' has been started."
+            request,
+            f"Processing for deduplication set '{dd}' has been started.",
         )
         return HttpResponseRedirect(reverse("admin:api_deduplicationset_changelist"))

src/hope_dedup_engine/config/__init__.py

@@ -1,5 +1,6 @@
 from enum import Enum
 from typing import TYPE_CHECKING, Any, Dict, Tuple, TypeAlias, Union
+from uuid import uuid4
 
 from smart_env import SmartEnv
 
@@ -173,8 +174,14 @@ class Group(Enum):
         setting("media-root"),
     ),
     "MEDIA_URL": (str, "/media/", "/media", False, setting("media-root")),  # nosec
-    "ROOT_TOKEN_HEADER": (str, "x-root-token", "x-root-token"),
-    "ROOT_TOKEN": (str, ""),
+    "ROOT_ACCESS_TOKEN": (str, uuid4().hex, uuid4().hex, False, "Root access token"),
+    "ROOT_TOKEN_HEADER": (
+        str,
+        "x-root-token",
+        "x-root-token",
+        False,
+        "Root token header",
+    ),
     "SECRET_KEY": (
         str,
         "",

src/hope_dedup_engine/config/fragments/root.py

@@ -1,4 +1,4 @@
 from hope_dedup_engine.config import env
 
-ROOT_TOKEN = env("ROOT_TOKEN")
-ROOT_TOKEN_HEADER = env("ROOT_TOKEN_HEADER", default="x-root-token")
+ROOT_TOKEN = env("ROOT_ACCESS_TOKEN")
+ROOT_TOKEN_HEADER = env("ROOT_TOKEN_HEADER")

tests/admin/test_admin_smoke.py

@@ -183,7 +183,7 @@ def test_admin_delete(app, modeladmin, record, monkeypatch):
         pytest.skip("No 'delete' permission")
 
 
-@pytest.mark.skip_buttons("security.UserAdmin:link_user_data")
+@pytest.mark.skip_buttons("api.DeduplicationSetAdmin:process")
 def test_admin_buttons(app, modeladmin, button_handler, record, monkeypatch):
     from admin_extra_buttons.handlers import LinkHandler