Add permissions for view persons groups

aleksis/core/migrations/0023_add_permissions_person.py

-# Generated by Django 3.0.5 on 2020-04-18 12:23
+# Generated by Django 3.0.5 on 2020-04-18 12:52
 
 from django.db import migrations
 
@@ -12,6 +12,6 @@ class Migration(migrations.Migration):
     operations = [
         migrations.AlterModelOptions(
             name='person',
-            options={'ordering': ['last_name', 'first_name'], 'permissions': (('view_address', 'Can view address'), ('view_contact_details', 'Can view contact details'), ('view_photo', 'Can view photo')), 'verbose_name': 'Person', 'verbose_name_plural': 'Persons'},
+            options={'ordering': ['last_name', 'first_name'], 'permissions': (('view_address', 'Can view address'), ('view_contact_details', 'Can view contact details'), ('view_photo', 'Can view photo'), ('view_person_groups', 'Can view persons groups')), 'verbose_name': 'Person', 'verbose_name_plural': 'Persons'},
         ),
     ]

aleksis/core/models.py

@@ -99,6 +99,7 @@ class Person(ExtensibleModel):
             ("view_address", _("Can view address")),
             ("view_contact_details", _("Can view contact details")),
             ("view_photo", _("Can view photo")),
+            ("view_person_groups", _("Can view persons groups")),
         )
 
     icon_ = "person"

aleksis/core/rules.py

@@ -42,6 +42,12 @@ view_photo_predicate = has_person_predicate & (
 )
 add_perm("core.view_photo", view_photo_predicate)
 
+# View persons groups
+view_groups_predicate = has_person_predicate & (
+    has_global_perm("core.view_person_groups") | has_object_perm("core.view_person_groups") | is_person
+)
+add_perm("core.view_person_groups", view_groups_predicate)
+
 # Change person
 change_person_predicate = has_person_predicate & (
     has_global_perm("core.change_person") | has_object_perm("core.change_person")

aleksis/core/templates/core/person_full.html

@@ -87,6 +87,9 @@
     </div>
   </div>
 
-  <h5>{% blocktrans %}Groups{% endblocktrans %}</h5>
-  {% render_table groups_table %}
+  {% has_perm 'core.view_person_groups' user person as can_view_groups %}
+  {% if can_view_groups %}
+    <h5>{% blocktrans %}Groups{% endblocktrans %}</h5>
+    {% render_table groups_table %}
+  {% endif %}
 {% endblock %}