Show only custom permissions as available in guardian admin for API

src/vng/servervalidation/admin.py

@@ -8,6 +8,8 @@
 
 from vng.testsession.models import SessionType
 
+from .forms import CustomAdminUserObjectPermissionsForm, CustomAdminGroupObjectPermissionsForm
+
 def get_all_fields(mo):
     l = [field.name for field in mo._meta.fields]
     l.remove('id')
@@ -67,6 +69,13 @@ def get_obj_perms_base_context(self, request, obj):
         context["model_perms"] = context["model_perms"].filter(codename__in=permission_codes)
         return context
 
+    def get_obj_perms_manage_group_form(self, request):
+        return CustomAdminGroupObjectPermissionsForm
+
+    def get_obj_perms_manage_user_form(self, request):
+        return CustomAdminGroupObjectPermissionsForm
+
+
 @admin.register(model.PostmanTest)
 class PostmanTestAdmin(AdminChangeLinksMixin, OrderedModelAdmin):
     list_display = ['name', 'version', 'test_scenario', 'move_up_down_links',

src/vng/servervalidation/forms.py

@@ -7,6 +7,7 @@
 from filer.models.filemodels import File
 from django.core.exceptions import ValidationError
 from django.utils.translation import gettext_lazy as _
+from guardian.admin import AdminUserObjectPermissionsForm, AdminGroupObjectPermissionsForm
 from django.forms.models import inlineformset_factory
 
 from tinymce.widgets import TinyMCE
@@ -211,3 +212,22 @@ class EnvironmentUpdateForm(forms.ModelForm):
     class Meta:
         model = Environment
         fields = ['name']
+
+
+class CustomPermissionChoicesMixin:
+    def get_obj_perms_field_choices(self):
+        """
+        Show only the custom permissions as the available object permissions
+        """
+        choices = super().get_obj_perms_field_choices()
+        permission_codes = [code for code, _ in self.obj._meta.permissions]
+        choices = [(perm, label) for perm, label in choices if perm in permission_codes]
+        return choices
+
+
+class CustomAdminUserObjectPermissionsForm(CustomPermissionChoicesMixin, AdminUserObjectPermissionsForm):
+    pass
+
+
+class CustomAdminGroupObjectPermissionsForm(CustomPermissionChoicesMixin, AdminGroupObjectPermissionsForm):
+    pass