Resolve "Add simple course book list"

Closes #256 (closed) Closes #63 (closed)

Screenshots

Frontend todos

• Uhrzeit so wie im Mockup
  • Rechtsbuendig @ZugBahnHof
• Kasten nicht höher als input-feld
• fach und subject strukturierter nebeneinander
• Kursnamen irgendwie hervorheben
• datum gleiche einrückung wie das datum
• datum sollte überschrift sein und prominenter gestaltet
• datum braucht Wochentag
• mittlere spalte linksaligned
• Indikator ob Stundenthema richtig gespeichert wurde (@yuha )
  • when hovering over icon & success: show some fancy success message
  • when hovering over icon & error: show error message
• verify that changes are being tracked using revisions (using a mixin in core creating revisions when mutating) (blocked by AlekSIS-Core!1433 (merged))
• Remove outer card
• Move search, group select, ... into an app bar (see also this)
• Bottom sheet for date select should not be full width of screen (@yuha )
• Statusicon am Anfang der Zeile fehlt (#63 (closed) explains the different stati)

aleksis/apps/alsijil/schema/__init__.py

 from django.db.models.query_utils import Q
+from django.core.exceptions import PermissionDenied
 
 from datetime import datetime
 import graphene
 
+from aleksis.apps.cursus.models import Course
+from aleksis.core.models import Group, Person
 from aleksis.core.schema.base import FilterOrderList
 
 from ..models import Documentation
@@ -39,6 +42,9 @@ class Query(graphene.ObjectType):
         datetime_start = datetime.combine(date_start, datetime.min.time())
         datetime_end = datetime.combine(date_end, datetime.max.time())
 
+        if (obj_type == "COURSE" and not info.context.user.has_perm("alsijil.view_documentations_for_course_rule", Course.objects.get(id=obj_id))) or (obj_type == "GROUPS" and not info.context.user.has_perm("alsijil.view_documentations_for_group_rule", Group.objects.get(id=obj_id))) or (obj_type == "TEACHER" and not info.context.user.has_perm("alsijil.view_documentations_for_teacher_rule", Person.objects.get(id=obj_id))):
+            raise PermissionsDenied()
+
         return Documentation.get_for_coursebook(obj_type, obj_id, datetime_start, datetime_end, info.context)