feat: pass file modification eval to deposit form

Author: carlinmack

invenio_app_rdm/records_ui/templates/semantic-ui/invenio_app_rdm/records/deposit.html

@@ -51,6 +51,9 @@
   {% if record_deletion %}
     <input type="hidden" name="deposits-record-deletion" value='{{ record_deletion | tojson }}'>
   {% endif %}
+  {% if file_modification %}
+    <input type="hidden" name="deposits-file-modification" value='{{ file_modification | tojson }}'>
+  {% endif %}
   <input type="hidden" name="config-groups-enabled"
           value='{{ config.USERS_RESOURCES_GROUPS_ENABLED | tojson }}'>
   <input type="hidden" name="records-resources-allow-empty-files"

invenio_app_rdm/records_ui/utils.py

@@ -14,7 +14,10 @@
 from flask import current_app, g
 from invenio_access.permissions import system_identity
 from invenio_rdm_records.requests.record_deletion import RecordDeletion
-from invenio_rdm_records.services.config import RDMRecordDeletionPolicy
+from invenio_rdm_records.services.config import (
+    RDMRecordDeletionPolicy,
+    FileModificationPolicyEvaluator,
+)
 from invenio_records.dictutils import dict_set
 from invenio_records.errors import MissingModelError
 from invenio_records_files.api import FileObject
@@ -120,10 +123,7 @@ def evaluate_record_deletion(record, draft=None):
 
     immediate, request = rec_del["immediate_deletion"], rec_del["request_deletion"]
     rd_enabled = immediate.enabled or request.enabled
-    rd_valid_user = (
-        rec_del["immediate_deletion"].valid_user
-        or rec_del["request_deletion"].valid_user
-    )
+    rd_valid_user = immediate.valid_user or request.valid_user
     rd_allowed = immediate.allowed or request.allowed
     existing_request = get_existing_deletion_request(record.id)
 
@@ -154,3 +154,22 @@ def evaluate_record_deletion(record, draft=None):
     )
 
     return record_deletion
+
+
+def evaluate_file_modification(record):
+    """Evaluate whether a given record file's can be edited by an identity."""
+    file_mod = FileModificationPolicyEvaluator().evaluate(g.identity, record._record)
+
+    file_mod = file_mod["immediate_file_modification"]
+    fm_allowed = file_mod.allowed
+
+    file_modification = {
+        "enabled": file_mod.enabled,
+        "valid_user": file_mod.valid_user,
+        "allowed": fm_allowed,
+    }
+    if fm_allowed:
+        file_modification["fileModification"] = file_mod
+        file_modification["context"] = {}
+
+    return file_modification

invenio_app_rdm/records_ui/views/deposits.py

@@ -37,7 +37,7 @@
 from marshmallow_utils.fields.babel import gettext_from_dict
 from sqlalchemy.orm import load_only
 
-from ..utils import evaluate_record_deletion, set_default_value
+from ..utils import evaluate_record_deletion, set_default_value, evaluate_file_modification
 from .decorators import (
     no_cache_response,
     pass_draft,
@@ -542,8 +542,10 @@ def deposit_edit(pid_value, draft=None, draft_files=None, files_locked=True):
         published_record = ui_serializer.dump_obj(published_record_result.to_dict())
 
         record_deletion = evaluate_record_deletion(published_record_result, draft)
+        file_modification = evaluate_file_modification(published_record_result)
     else:
         record_deletion = {}
+        file_modification = {}
 
     community_ui = None
     community_theme = None
@@ -619,6 +621,7 @@ def deposit_edit(pid_value, draft=None, draft_files=None, files_locked=True):
             ]
         ),
         record_deletion=record_deletion,
+        file_modification=file_modification,
     )
 
 

invenio_app_rdm/theme/assets/semantic-ui/js/invenio_app_rdm/deposit/RDMDepositForm.js

@@ -114,6 +114,7 @@ export class RDMDepositForm extends Component {
       recordRestrictionGracePeriod,
       allowRecordRestriction,
       recordDeletion,
+      fileModification,
       groupsEnabled,
       allowEmptyFiles,
       useUppy,
@@ -138,6 +139,7 @@ export class RDMDepositForm extends Component {
         recordRestrictionGracePeriod={recordRestrictionGracePeriod}
         allowRecordRestriction={allowRecordRestriction}
         recordDeletion={recordDeletion}
+        fileModification={fileModification}
         groupsEnabled={groupsEnabled}
         allowEmptyFiles={allowEmptyFiles}
         customFieldsUI={customFieldsUI}
@@ -210,6 +212,7 @@ export class RDMDepositForm extends Component {
                         allowEmptyFiles={allowEmptyFiles}
                         filesLocked={filesLocked}
                         fileUploadConcurrency={config.fileUploadConcurrency}
+                        fileModification={fileModification}
                       />
                     </Overridable>
                   </AccordionField>

invenio_app_rdm/theme/assets/semantic-ui/js/invenio_app_rdm/deposit/index.js

@@ -29,6 +29,7 @@ ReactDOM.render(
       )}
       allowRecordRestriction={getInputFromDOM("deposits-allow-record-restriction")}
       recordDeletion={getInputFromDOM("deposits-record-deletion")}
+      fileModification={getInputFromDOM("deposits-file-modification")}
       groupsEnabled={getInputFromDOM("config-groups-enabled")}
       allowEmptyFiles={getInputFromDOM("records-resources-allow-empty-files")}
       isDoiRequired={getInputFromDOM("deposits-is-doi-required")}