feat: add visibiilities to relationships

README.md

@@ -69,10 +69,34 @@ For the visibilities, extend your DRF `ViewSet` classes with the
 from rest_framework.viewsets import ModelViewSet
 from generic_permissions.visibilities import VisibilityViewMixin
 class MyModelViewset(VisibilityViewMixin, ModelViewSet):
-    serializer_class = ...
+    serializer_class = MyModelSerializers
     queryset = ...
 ```
 
+Make sure to use a subclassed `serializer_related_field` (such as the default `PrimariyKeyRelatedField`)
+with the provided `VisibilityRelatedFieldMixin`. Otherwise relationships will leak hidden models.
+
+```python
+# serializers.py
+from rest_framework.viewsets import ModelSerializer
+from generic_permissions.visibilities import VisibilityPrimaryKeyRelatedField
+class MyModelSerializers(ModelSerializer):
+    serializer_related_field = VisibilityPrimaryKeyRelatedField
+```
+
+A few subclassed fields are provided:
+- `VisibilityPrimaryKeyRelatedField`
+- `VisibilityResourceRelatedField`
+- `VisibilitySerializerMethodResourceRelatedField`
+
+If a different relation field variation is needed extend it with `VisibilityRelatedFieldMixin`:
+
+```python
+from generic_permissions.visibilities import VisibilityRelatedFieldMixin
+class CustomRelationField(VisibilityRelatedFieldMixin):
+    pass
+```
+
 ### Permission subsystem
 
 Similarly, for the permissions system, add the `PermissionViewMixin` to your
@@ -94,13 +118,13 @@ You may use only one of the two mixins, or both, depending on your needs.
 Last, for the validation system, you extend your **serializer** with a mixin:
 ```python
 # serializers.py
-from rest_framework import serializers
+from rest_framework.serializers import ModelSerializer
 
 from generic_permissions.serializers import PermissionSerializerMixin
 from generic_permissions.validation import ValidatorMixin
 
 from myapp import models
-class MyModelSerializer(ValidatorMixin, serializers.ModelSerializer):
+class MyModelSerializer(ValidatorMixin, ModelSerializer):
     # my field definitions...
     class Meta:
         model = models.MyModel

generic_permissions/visibilities.py

@@ -43,6 +43,24 @@ def get_queryset(self):
 
         return queryset
 
+class VisibilityRelatedFieldMixin():
+    def get_queryset(self):
+        queryset = super().get_queryset()
+
+        for handler in VisibilitiesConfig.get_handlers(queryset.model):
+            queryset = handler(queryset, self.get_parent_serializer()._context["request"])
+
+        return queryset
+
+class VisibilityPrimaryKeyRelatedField(VisibilityRelatedFieldMixin):
+    pass
+
+class VisibilityResourceRelatedField(VisibilityRelatedFieldMixin):
+    pass
+
+class VisibilitySerializerMethodResourceRelatedField(VisibilityRelatedFieldMixin):
+    pass
+
 
 class BaseVisibility:  # pragma: no cover
     def __init__(self, *args, **kwargs):