How to check if a user has permission when looping through all permissions?

Question

I have a model named Account, which is connected to the default User model. As of now, I'm looping through all permissions associated with the Account model, but I also want to check if the Account profile page's user has the one or more of the specific permissions that's being looped through. The purpose is just to create an easy overview.

I have also tried checking perms.cms.get_permission_codename.

models.py

class Account(models.Model):
    user = models.OneToOneField(User, on_delete=models.CASCADE)
    site = models.CharField(max_length=50, choices=(('all', 'all'), ('danielk', 'danielk'), ('flis', 'flis'), ('vmusic', 'vmusic')), blank=True)
    site_role = models.CharField(max_length=50, choices=(('Administrator', 'Administrator'), ('Moderator', 'Moderator'), ('Editor', 'Editor')))
    phone_number = models.CharField(max_length=8)
    birth_date = models.DateField()
    street_adress = models.CharField(max_length=255)
    note = models.TextField(blank=True);
    zip_code = models.CharField(max_length=4)
    city = models.CharField(max_length=255)

    def formatedPhone(self, country=None):
        return phonenumbers.parse(Account.phone_number, "NO")

    """
    def __str__(self):
        return "%s %s" % (self.User.first_name, self.user.last_name)
    """

    def get_absolute_url(self):
        return reverse('account-detail', kwargs={'pk': self.pk})

    class Meta:
        verbose_name = 'Account meta'
        verbose_name_plural = 'Accounts meta'
        permissions = (
            ("has_user_hijack_permission", "Allows the user to log in as others"),
            ("has_user_management", "Allows a user to deactivate/delete other users"),
            ("has_user_site_edit", "Allows a user to edit site and role details"),
            ("has_user_takeout", "Can export user details"),
        )

views.py

class cms_users_user_permissions(generic.DetailView):
    model = Account
    template_name = 'cms/users/cms-users-user-permissions.html'

    def get_context_data(self, **kwargs):
        context = super().get_context_data(**kwargs)
        context["permissions"] = Permission.objects.filter(content_type=ContentType.objects.get_for_model(Account))
        #context['permissions'] = Permission.objects.filter(content_type_id=7)
        return context

table.html

<table class="table is-fullwidth">
    <tbody>
        {% for permission in permissions %}
            <tr>
                <td style="width: 300px;">{{ permission.codename }}</td>
                 <td>{{ permission.name }}</td>

                 {% if account.user.has_perm %}
                     <td>
                         <span class="icon is-small">
                             <i class="fas fa-check-circle has-text-success"></i>
                         </span>
                     </td>
                  {% else %}
                      <td>
                          <span class="icon is-small">
                              <i class="fas fa-times-circle has-text-danger"></i>
                          </span>
                       </td>
                   {% endif %}
             </tr>
          {% endfor %}      
       </tbody>
   </table>

Answer 1

I'm not sure what you are really asking, but I'll give it a go.

If you want to check in the template whether the user has any of the four permissions, you can change the

context["permissions"] = Permission.objects.filter(content_type=ContentType.objects.get_for_model(Account))

to

context["permissions"] = Permission.objects.filter(content_type=ContentType.objects.get_for_model(Account), user_set=self.request.user)

Since Permission has a ManyToMany relationship to User, the user_set for an instance of Permission will contain all Users having that permission. The result will be that context["permissions"] only contains the permissions of Account that the User has. This would mean your table doesn't show the permissions the users does not have, so this might not be what you want.

If you are having problems with the

 {% if account.user.has_perm %}

part, there are 2 solutions that pop into my mind; A static solution and a dynamic solution.

Static:
Since there are only 4 permissions to check in this case you could also try what Tim Kamanin does at https://timonweb.com/posts/how-to-get-a-list-of-all-user-permissions-available-in-django-based-project/. This would mean that you delete the loop and for each of the 4 permission you can add a block looking like

{% if perm.account.has_user_hijack_permission %}
   <td>
      <span class="icon is-small">
        <i class="fas fa-check-circle has-text-success"></i>
      </span>
   </td>
{% else %}
   <td>
      <span class="icon is-small">
        <i class="fas fa-times-circle has-text-danger"></i>
      </span>
   </td>
{% endif %}

Dynamic:
At Check permission inside a template in Django it is written that {{ perms }} contains all the permissions a user has, so a dynamic solution would be

{% for permission in permissions %}
  {% if permission in perms %}
   <td>
      <span class="icon is-small">
        <i class="fas fa-check-circle has-text-success"></i>
      </span>
   </td>
  {% else %}
   <td>
      <span class="icon is-small">
        <i class="fas fa-times-circle has-text-danger"></i>
      </span>
   </td>
  {% endif %}
{% endfor %}

The dynamic solution has more flexibility and is more RESTFUL, since if you expand the query in context["permissions"] or add more permissions to the Account class this still works.

--- edits to account for comments ---

In case you want the permissions of the User you are accessing instead of the User you are signed in with, you can, according to How to get user permissions? , replace {{ perms }} with {{ accessed_user_permissions }} after adding

context["accessed_user_permissions "] = user.user_permissions.all()

Note that this does not include group permissions. If you want to include groep permission, you need to do something like

context["accessed_user_permissions "] = user.user_permissions.all() | user.group_permissions.all()