update django-guardian

Author: felixrindt

ephios/extra/auth.py

@@ -129,9 +129,7 @@ def authenticate(self, request, username=None, password=None, **kwargs):
             )  # this already contains the claims for the tested OP, check the standard to see if we can omit the call to the user endpoint
             user_info = oauth.request("GET", self.provider.userinfo_endpoint).json()
             logger.debug(
-                "Trying to OIDC login user with info user_info\n: {}".format(
-                    pprint.pformat(user_info)
-                )
+                f"Trying to OIDC login user with info user_info\n: {pprint.pformat(user_info)}"
             )
             if "email" not in user_info:
                 raise SuspiciousOperation("OIDC client did not return email address")

ephios/extra/permissions.py

@@ -49,6 +49,11 @@ def _make_permission_names_qualified(permission_names, obj: Optional):
 def get_groups_with_perms(
     obj=None, *, only_with_perms_in=None, must_have_all_perms=False, accept_global_perms=True
 ):
+    """
+    Version of `get_groups_with_perms` that has `only_with_perms` and `must_have_all_perms`.
+    As of 2025-09-18, guardian is missing the `must_have_all_perms` option on this shortcut,
+    but does support the `attach_perms` parameter.
+    """
     qs = Group.objects.all()
     qualified_permission_names = _make_permission_names_qualified(only_with_perms_in or [], obj)
     required_perms = get_permissions_from_qualified_names(qualified_permission_names)

poetry.lock

@@ -18,7 +18,7 @@ documentation = "https://docs.ephios.de/en/stable/"
 python = "^3.10"
 Django = {version = "~5.2", extras = ["argon2"]}
 django-environ = ">=0.11.2,<0.13"
-django-guardian = "^3.0.0"
+django-guardian = "^3.2.0"
 django-ical = "^1.8.3"
 django-polymorphic = ">=4.1,<5.0"
 django-select2 = ">=8.0,<9.0"