Add loggers to permission denied attempts (#571)

* Add loggers to permission denied attempts

* fix lint

apps/workspaces/permissions.py

@@ -1,3 +1,4 @@
+import logging
 from cryptography.fernet import Fernet
 from django.conf import settings
 from django.contrib.auth import get_user_model
@@ -8,18 +9,25 @@
 
 User = get_user_model()
 
+logger = logging.getLogger(__name__)
+logger.setLevel(logging.INFO)
+
 
 class WorkspacePermissions(permissions.BasePermission):
     """
     Permission check for users <> workspaces
     """
 
-    def validate_and_cache(self, workspace_users, user: User, workspace_id: str, cache_users: bool = False):
+    def validate_and_cache(self, workspace_users, user: User, workspace_id: str, payload: dict, cache_users: bool = False):
         if user.id in workspace_users:
             if cache_users:
                 cache.set(workspace_id, workspace_users, 172800)
             return True
 
+        logger.error(f'User {user.id} is not allowed to access workspace {workspace_id}')
+        logger.info(f'Permission was cached earlier: {not cache_users}')
+        logger.info(f'Allowed users: {workspace_users}')
+        logger.info(f'Payload: {payload}')
         return False
 
     def has_permission(self, request, view):
@@ -28,10 +36,10 @@ def has_permission(self, request, view):
         workspace_users = cache.get(workspace_id)
 
         if workspace_users:
-            return self.validate_and_cache(workspace_users, user, workspace_id)
+            return self.validate_and_cache(workspace_users, user, workspace_id, request.data)
         else:
             workspace_users = Workspace.objects.filter(pk=workspace_id).values_list('user', flat=True)
-            return self.validate_and_cache(workspace_users, user, workspace_id, True)
+            return self.validate_and_cache(workspace_users, user, workspace_id, request.data, True)
 
 
 class IsAuthenticatedForTest(permissions.BasePermission):