-
+
+ {{ book.title }}
+ ({{ book.average_rating }})
+
Автор: {{ book.author }}
{% if book.genres.all %}
Жанры:
{% for g in book.genres.all %}
- {{ g.name }}{% if not forloop.last %}, {% endif %}
+ {{ g.name }}
+ {% if not forloop.last %}, {% endif %}
{% endfor %}
{% endif %}
diff --git a/bookify/books/templates/books/edit_genre.html b/bookify/books/templates/books/edit_genre.html
new file mode 100644
index 0000000..2a2fc96
--- /dev/null
+++ b/bookify/books/templates/books/edit_genre.html
@@ -0,0 +1,9 @@
+{% extends 'books/base.html' %}
+{% block content %}
+
Редактировать жанр
+
+{% endblock %}
diff --git a/bookify/books/templates/books/genre_list.html b/bookify/books/templates/books/genre_list.html
new file mode 100644
index 0000000..5321132
--- /dev/null
+++ b/bookify/books/templates/books/genre_list.html
@@ -0,0 +1,19 @@
+{% extends 'books/base.html' %}
+{% block content %}
+
Список жанров
+
+ {% for genre in genres %}
+ -
+ {{ genre.name }}
+
+ {% if user.is_authenticated %}
+ Редактировать
+ Удалить
+ {% endif %}
+
+ {% endfor %}
+
+{% if user.is_authenticated %}
+
Добавить жанр
+{% endif %}
+{% endblock %}
diff --git a/bookify/books/urls.py b/bookify/books/urls.py
index 40a0bc5..95136b8 100644
--- a/bookify/books/urls.py
+++ b/bookify/books/urls.py
@@ -1,3 +1,4 @@
+# books/urls.py
from django.urls import path
from . import views
@@ -10,9 +11,14 @@ urlpatterns = [
path("book/add/", views.add_book, name="add_book"),
path("book/delete/
/", views.delete_book, name="delete_book"),
path("book//add_review/", views.add_review, name="add_review"),
+ path("genres/", views.genre_list, name="genre_list"),
+ path("genres/add/", views.add_genre, name="add_genre"),
+ path("genres/edit//", views.edit_genre, name="edit_genre"),
+ path("genres/delete//", views.delete_genre, name="delete_genre"),
path(
"genres//",
views.genre_recommendations,
name="genre_recommendations",
),
+ path("register/", views.register, name="register"),
]
diff --git a/bookify/books/views.py b/bookify/books/views.py
index c309554..64a1b80 100644
--- a/bookify/books/views.py
+++ b/bookify/books/views.py
@@ -1,9 +1,26 @@
+from django.contrib.auth import login
+from django.contrib.auth.decorators import login_required
+from django.contrib.auth.forms import AuthenticationForm
+from django.core.exceptions import PermissionDenied
from django.shortcuts import get_object_or_404, redirect, render
-from .forms import BookForm, ReviewForm
+from .forms import BookForm, CustomUserCreationForm, GenreForm, ReviewForm
from .models import Book, Genre, Review
+def register(request):
+ """Регистрация нового пользователя."""
+ if request.method == "POST":
+ form = CustomUserCreationForm(request.POST)
+ if form.is_valid():
+ user = form.save()
+ login(request, user) # сразу авторизуем после регистрации
+ return redirect("books:book_list")
+ else:
+ form = CustomUserCreationForm()
+ return render(request, "accounts/register.html", {"form": form})
+
+
def book_list(request):
"""Главная страница со списком всех книг."""
books = Book.objects.all()
@@ -22,33 +39,44 @@ def book_detail(request, pk):
)
+@login_required
def add_book(request):
- """Добавление новой книги."""
+ """Добавление новой книги (только авторизованный пользователь)."""
if request.method == "POST":
form = BookForm(request.POST)
if form.is_valid():
- form.save()
+ book = form.save(commit=False)
+ book.created_by = request.user
+ book.save()
+ form.save_m2m() # сохраняем многие-ко-многим
return redirect("books:book_list")
else:
form = BookForm()
return render(request, "books/add_book.html", {"form": form})
+@login_required
def delete_book(request, pk):
- """Удаление книги."""
+ """Удаление книги (только если user == created_by)."""
book = get_object_or_404(Book, pk=pk)
+ if book.created_by != request.user:
+ # Если не совпадает, то выбрасываем ошибку 403
+ raise PermissionDenied("Вы не можете удалять чужие книги.")
+
book.delete()
return redirect("books:book_list")
+@login_required
def add_review(request, pk):
- """Добавление отзыва к книге."""
+ """Добавление отзыва к книге (только авторизованный пользователь)."""
book = get_object_or_404(Book, pk=pk)
if request.method == "POST":
form = ReviewForm(request.POST)
if form.is_valid():
review = form.save(commit=False)
review.book = book
+ review.user = request.user
review.save()
return redirect("books:book_detail", pk=pk)
@@ -61,3 +89,44 @@ def genre_recommendations(request, genre_name):
return render(
request, "books/genre_recommendations.html", {"genre": genre, "books": books}
)
+
+
+def genre_list(request):
+ """Страница со всеми жанрами."""
+ genres = Genre.objects.all()
+ return render(request, "books/genre_list.html", {"genres": genres})
+
+
+@login_required
+def add_genre(request):
+ """Добавить новый жанр."""
+ if request.method == "POST":
+ form = GenreForm(request.POST)
+ if form.is_valid():
+ form.save()
+ return redirect("books:genre_list")
+ else:
+ form = GenreForm()
+ return render(request, "books/add_genre.html", {"form": form})
+
+
+@login_required
+def edit_genre(request, pk):
+ """Редактировать жанр."""
+ genre = get_object_or_404(Genre, pk=pk)
+ if request.method == "POST":
+ form = GenreForm(request.POST, instance=genre)
+ if form.is_valid():
+ form.save()
+ return redirect("books:genre_list")
+ else:
+ form = GenreForm(instance=genre)
+ return render(request, "books/edit_genre.html", {"form": form})
+
+
+@login_required
+def delete_genre(request, pk):
+ """Удалить жанр."""
+ genre = get_object_or_404(Genre, pk=pk)
+ genre.delete()
+ return redirect("books:genre_list")