feat(pricing): add workspace user rates and price units

apps/workspaces/api/views.py

@@ -1,7 +1,8 @@
 from django.db.models import Q
 from django.shortcuts import get_object_or_404
-from rest_framework import status
-from rest_framework.response import Response
+from rest_framework import status
+from rest_framework.exceptions import PermissionDenied
+from rest_framework.response import Response
 from rest_framework.filters import OrderingFilter, SearchFilter
 from django_filters.rest_framework import DjangoFilterBackend
 from rest_framework.viewsets import ModelViewSet
@@ -19,14 +20,24 @@ from apps.workspaces.api.permissions import (
     IsWorkspaceMember,
     IsWorkspaceOwner,
 )
-from apps.workspaces.api.serializers import WorkspaceMembershipSerializer, WorkspaceSerializer
+from apps.workspaces.api.serializers import (
+    PriceUnitSerializer,
+    WorkspaceMembershipSerializer,
+    WorkspaceSerializer,
+    WorkspaceUserRateSerializer,
+    WorkspaceUserRateCreateSerializer,
+    WorkspaceUserRateUpdateSerializer,
+)
 from apps.workspaces.api.filters import WorkspaceFilter, WorkspaceMembershipFilter
-from apps.workspaces.models import Workspace, WorkspaceMembership
+from apps.workspaces.models import PriceUnit, Workspace, WorkspaceMembership, WorkspaceUserRate
 from apps.workspaces.services import (
     WORKSPACE_MEMBERS_VIEW,
+    WORKSPACE_EDIT,
     can_assign_workspace_role,
     can_change_workspace_membership,
     has_workspace_capability,
+    upsert_workspace_user_rate,
+    update_workspace_user_rate,
 )
 from core.paginations.limit_offset import CustomLimitOffsetPagination
 
@@ -65,7 +76,7 @@ class WorkspaceViewSet(ModelViewSet):
         serializer.save(owner=self.request.user)
 
 
-class WorkspaceMembershipViewSet(ModelViewSet):
+class WorkspaceMembershipViewSet(ModelViewSet):
     serializer_class = WorkspaceMembershipSerializer
     pagination_class = CustomLimitOffsetPagination
     filter_backends = (DjangoFilterBackend, OrderingFilter, SearchFilter)
@@ -236,3 +247,99 @@ class WorkspaceMembershipViewSet(ModelViewSet):
             role=role,
         )
         return Response(status=status.HTTP_204_NO_CONTENT)
+
+
+class PriceUnitViewSet(ModelViewSet):
+    serializer_class = PriceUnitSerializer
+    permission_classes = [IsAuthenticated]
+    http_method_names = ["get", "head", "options"]
+    pagination_class = None
+    filter_backends = (SearchFilter, OrderingFilter)
+    search_fields = ("code", "name", "local_name", "symbol")
+    ordering_fields = ("code", "name")
+    ordering = ("code",)
+
+    def get_queryset(self):
+        return PriceUnit.objects.filter(is_deleted=False)
+
+
+class WorkspaceUserRateViewSet(ModelViewSet):
+    serializer_class = WorkspaceUserRateSerializer
+    pagination_class = CustomLimitOffsetPagination
+    filter_backends = (DjangoFilterBackend, OrderingFilter)
+    filterset_fields = ("workspace", "user", "currency")
+    ordering_fields = ("effective_from", "updated_at", "created_at")
+    ordering = ("-effective_from", "-updated_at")
+
+    def get_queryset(self):
+        user = self.request.user
+        if not user.is_authenticated:
+            return WorkspaceUserRate.objects.none()
+        return WorkspaceUserRate.objects.filter(
+            workspace__memberships__user=user,
+            workspace__memberships__is_active=True,
+            is_deleted=False,
+        ).distinct()
+
+    def get_serializer_class(self):
+        if self.action == "create":
+            return WorkspaceUserRateCreateSerializer
+        if self.action in ["update", "partial_update"]:
+            return WorkspaceUserRateUpdateSerializer
+        return WorkspaceUserRateSerializer
+
+    def _ensure_manage_access(self, user, workspace):
+        if not has_workspace_capability(user, workspace, WORKSPACE_EDIT):
+            raise PermissionDenied("You do not have permission to manage workspace rates.")
+
+    def list(self, request, *args, **kwargs):
+        workspace_id = request.query_params.get("workspace")
+        if not workspace_id:
+            return Response(
+                {"detail": "workspace query parameter is required."},
+                status=status.HTTP_400_BAD_REQUEST,
+            )
+        workspace = get_object_or_404(Workspace, id=workspace_id, is_deleted=False)
+        self._ensure_manage_access(request.user, workspace)
+        return super().list(request, *args, **kwargs)
+
+    def create(self, request, *args, **kwargs):
+        serializer = self.get_serializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+        workspace = get_object_or_404(
+            Workspace,
+            id=serializer.validated_data["workspace_id"],
+            is_deleted=False,
+        )
+        self._ensure_manage_access(request.user, workspace)
+        rate = upsert_workspace_user_rate(
+            workspace=workspace,
+            user_id=serializer.validated_data["user_id"],
+            hourly_rate=serializer.validated_data["hourly_rate"],
+            currency=serializer.validated_data.get("currency", "USD"),
+        )
+        return Response(
+            WorkspaceUserRateSerializer(rate, context=self.get_serializer_context()).data,
+            status=status.HTTP_201_CREATED,
+        )
+
+    def update(self, request, *args, **kwargs):
+        rate = self.get_object()
+        self._ensure_manage_access(request.user, rate.workspace)
+        serializer = self.get_serializer(data=request.data, partial=kwargs.pop("partial", False))
+        serializer.is_valid(raise_exception=True)
+        updated_rate = update_workspace_user_rate(rate, **serializer.validated_data)
+        return Response(
+            WorkspaceUserRateSerializer(updated_rate, context=self.get_serializer_context()).data,
+            status=status.HTTP_200_OK,
+        )
+
+    def partial_update(self, request, *args, **kwargs):
+        kwargs["partial"] = True
+        return self.update(request, *args, **kwargs)
+
+    def destroy(self, request, *args, **kwargs):
+        rate = self.get_object()
+        self._ensure_manage_access(request.user, rate.workspace)
+        rate.delete()
+        return Response(status=status.HTTP_204_NO_CONTENT)