Full-stack dev.
React & Node.
Based in Wales.

"color:#6A9955"># Pontiro — research dataset access request
"color:#6A9955"># Python · Django REST Framework · JWT auth

"color:#569CD6">from rest_framework.views "color:#569CD6">import APIView
"color:#569CD6">from rest_framework.permissions "color:#569CD6">import IsAuthenticated
"color:#569CD6">from rest_framework.response "color:#569CD6">import Response
"color:#569CD6">from rest_framework "color:#569CD6">import status
"color:#569CD6">from .models "color:#569CD6">import DatasetRequest
"color:#569CD6">from .serializers "color:#569CD6">import DatasetRequestSerializer
"color:#569CD6">from .permissions "color:#569CD6">import IsResearcher

"color:#569CD6">class RequestDatasetAccessView(APIView):
    "color:#CE9178">"""
    POST /api/datasets/{id}/request/
    Researcher submits an access request.
    Admin receives a notification via WebSocket.
    """
    permission_classes = [IsAuthenticated, IsResearcher]

    "color:#569CD6">def post("color:#569CD6">self, request, dataset_id):
        serializer = DatasetRequestSerializer(
            data=request.data,
            context={"request": request, "dataset_id": dataset_id}
        )
        "color:#569CD6">if "color:#569CD6">not serializer.is_valid():
            "color:#569CD6">return Response(serializer.errors, status=400)

        access_request = serializer.save(
            researcher=request.user,
            dataset_id=dataset_id,
            status="pending",
        )

        notify_admins_ws(access_request)

        AuditLog.objects.create(
            actor=request.user,
            action="REQUEST_SUBMITTED",
            target_id=access_request.id,
        )

        "color:#569CD6">return Response(
            DatasetRequestSerializer(access_request).data,
            status=status.HTTP_201_CREATED,
        )