Feat(submissions)/deletion of form submission (#951)

* Update the Submission model with a destroy method()

* Update the Submission model with imports

* Created an endpoint in the view

* Update submissions

* Updated serializer and view for deleting a submission with reason

* Removed unsued import of mail

* Added missing imports

* Fixed format in files

---------

Co-authored-by: Josefine Arntsen <[email protected]>
Co-authored-by: Mads Nylund <[email protected]>

Author: 3 people

app/forms/serializers/submission.py

@@ -89,3 +89,17 @@ class SubmissionGDPRSerializer(SubmissionInRegistrationSerializer):
     class Meta:
         model = SubmissionInRegistrationSerializer.Meta.model
         fields = SubmissionInRegistrationSerializer.Meta.fields
+
+
+class SubmissionDestroySerializer(serializers.Serializer):
+    reason = serializers.CharField(required=True, allow_blank=False)
+
+    class Meta:
+        fields = ["reason"]
+
+    def validate_reason(self, value):
+        if not value.strip():
+            raise serializers.ValidationError(
+                "Grunnen kan ikke være tom eller kun inneholde mellomrom."
+            )
+        return value

app/forms/views/submission.py

@@ -1,3 +1,5 @@
+from django.conf import settings
+from django.core.mail import send_mail
 from rest_framework import status
 from rest_framework.decorators import action
 from rest_framework.generics import get_object_or_404
@@ -13,7 +15,10 @@
 from app.forms.enums import NativeEventFormType as EventFormType
 from app.forms.mixins import APIFormErrorsMixin
 from app.forms.models.forms import EventForm, Form, Submission
-from app.forms.serializers.submission import SubmissionSerializer
+from app.forms.serializers.submission import (
+    SubmissionDestroySerializer,
+    SubmissionSerializer,
+)
 
 
 class SubmissionViewSet(APIFormErrorsMixin, BaseViewSet):
@@ -71,3 +76,27 @@ def create(self, request, *args, **kwargs):
     def download(self, _request, *_args, **_kwargs):
         """To return the response as csv, include header 'Accept: text/csv."""
         return SubmissionsCsvWriter(self.get_queryset()).write_csv()
+
+    @action(detail=True, methods=["delete"])
+    def destroy_with_reason(self, request, *args, **kwargs):
+        submission = self.get_object()
+        serializer = SubmissionDestroySerializer(data=request.data)
+
+        if not serializer.is_valid():
+            return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
+
+        reason = serializer.validated_data.get("reason", "Ingen grunn oppgitt.")
+
+        send_mail(
+            subject="Ditt svar på spørreskjemaet har blitt slettet",
+            message=f"Ditt svar på spørreskjemaet {submission.form.title} har blitt slettet av en administrator. Grunnen er: {reason}",
+            from_email=settings.DEFAULT_FROM_EMAIL,
+            recipient_list=[submission.user.email],
+        )
+
+        submission.delete()
+
+        return Response(
+            {"detail": "Skjemaet er slettet og brukeren er varslet."},
+            status=status.HTTP_200_OK,
+        )