Files @ bc2d8c03c050
Branch filter:

Location: kallithea/rhodecode/controllers/admin/users_groups.py - annotation

Marcin Kuzminski
Implemented #467 Journal logs comments on changesets
- added created/updated user action to journal
- added created/updated users group action journal
- added ip adresses to most of action_log calls to track IP changes
- rewrote action_parser to simpler and more efficient solution
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
6832ef664673
83d35d716a02
83d35d716a02
89efedac4e6c
83d35d716a02
83d35d716a02
a671db5bdd58
a671db5bdd58
a671db5bdd58
a671db5bdd58
6832ef664673
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
6832ef664673
83d35d716a02
a671db5bdd58
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
8ecfed1d8f8b
a62af7d509ee
8ecfed1d8f8b
6eb5bb24a948
83d35d716a02
83d35d716a02
8ecc6b8229a5
8ecc6b8229a5
aa7e45ad0cea
8ecc6b8229a5
8ecc6b8229a5
bc2d8c03c050
83d35d716a02
83d35d716a02
83d35d716a02
5f2fbab7c429
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
fff21c9b075c
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
88d13c1c6a55
fff21c9b075c
fff21c9b075c
fff21c9b075c
8ecc6b8229a5
8ecc6b8229a5
bc2d8c03c050
bc2d8c03c050
bc2d8c03c050
bc2d8c03c050
bc2d8c03c050
8ecc6b8229a5
fff21c9b075c
fff21c9b075c
fff21c9b075c
fff21c9b075c
fff21c9b075c
fff21c9b075c
fff21c9b075c
fff21c9b075c
fff21c9b075c
fff21c9b075c
fff21c9b075c
fff21c9b075c
fff21c9b075c
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
fff21c9b075c
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
88d13c1c6a55
4a7de41dc22a
4a7de41dc22a
4a7de41dc22a
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
cf51bbfb120e
8ecc6b8229a5
cf51bbfb120e
2c8fd84935a4
2c8fd84935a4
8ecc6b8229a5
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
8ecc6b8229a5
bc2d8c03c050
bc2d8c03c050
bc2d8c03c050
bc2d8c03c050
bc2d8c03c050
8ecc6b8229a5
2c8fd84935a4
aa7e45ad0cea
aa7e45ad0cea
aa7e45ad0cea
aa7e45ad0cea
8ecc6b8229a5
aa7e45ad0cea
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
aa7e45ad0cea
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
88d13c1c6a55
9be6d46c72d6
8ecc6b8229a5
d9ba58526712
9be6d46c72d6
a62af7d509ee
a62af7d509ee
9be6d46c72d6
d9ba58526712
9be6d46c72d6
9be6d46c72d6
9be6d46c72d6
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
83d35d716a02
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
4a7de41dc22a
4a7de41dc22a
4a7de41dc22a
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
aa7e45ad0cea
aa7e45ad0cea
8ecc6b8229a5
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
2c8fd84935a4
aa7e45ad0cea
aa7e45ad0cea
aa7e45ad0cea
aa7e45ad0cea
aa7e45ad0cea
aa7e45ad0cea
aa7e45ad0cea
aa7e45ad0cea
aa7e45ad0cea
8ecc6b8229a5
aa7e45ad0cea
aa7e45ad0cea
8ecc6b8229a5
aa7e45ad0cea
aa7e45ad0cea
cf51bbfb120e
8ecc6b8229a5
aa7e45ad0cea
aa7e45ad0cea
8ecc6b8229a5
aa7e45ad0cea
aa7e45ad0cea
8ecc6b8229a5
aa7e45ad0cea
aa7e45ad0cea
8ecc6b8229a5
aa7e45ad0cea
# -*- coding: utf-8 -*-
"""
    rhodecode.controllers.admin.users_groups
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Users Groups crud controller for pylons

    :created_on: Jan 25, 2011
    :author: marcink
    :copyright: (C) 2010-2012 Marcin Kuzminski <marcin@python-works.com>
    :license: GPLv3, see COPYING for more details.
"""
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import logging
import traceback
import formencode

from formencode import htmlfill
from pylons import request, session, tmpl_context as c, url, config
from pylons.controllers.util import abort, redirect
from pylons.i18n.translation import _

from rhodecode.lib import helpers as h
from rhodecode.lib.exceptions import UsersGroupsAssignedException
from rhodecode.lib.utils2 import safe_unicode
from rhodecode.lib.auth import LoginRequired, HasPermissionAllDecorator
from rhodecode.lib.base import BaseController, render

from rhodecode.model.users_group import UsersGroupModel

from rhodecode.model.db import User, UsersGroup, Permission, UsersGroupToPerm
from rhodecode.model.forms import UsersGroupForm
from rhodecode.model.meta import Session
from rhodecode.lib.utils import action_logger

log = logging.getLogger(__name__)


class UsersGroupsController(BaseController):
    """REST Controller styled on the Atom Publishing Protocol"""
    # To properly map this controller, ensure your config/routing.py
    # file has a resource setup:
    #     map.resource('users_group', 'users_groups')

    @LoginRequired()
    @HasPermissionAllDecorator('hg.admin')
    def __before__(self):
        c.admin_user = session.get('admin_user')
        c.admin_username = session.get('admin_username')
        super(UsersGroupsController, self).__before__()
        c.available_permissions = config['available_permissions']

    def index(self, format='html'):
        """GET /users_groups: All items in the collection"""
        # url('users_groups')
        c.users_groups_list = self.sa.query(UsersGroup).all()
        return render('admin/users_groups/users_groups.html')

    def create(self):
        """POST /users_groups: Create a new item"""
        # url('users_groups')

        users_group_form = UsersGroupForm()()
        try:
            form_result = users_group_form.to_python(dict(request.POST))
            UsersGroupModel().create(name=form_result['users_group_name'],
                                     active=form_result['users_group_active'])
            gr = form_result['users_group_name']
            action_logger(self.rhodecode_user,
                          'admin_created_users_group:%s' % gr,
                          None, self.ip_addr, self.sa)
            h.flash(_('created users group %s') % gr, category='success')
            Session.commit()
        except formencode.Invalid, errors:
            return htmlfill.render(
                render('admin/users_groups/users_group_add.html'),
                defaults=errors.value,
                errors=errors.error_dict or {},
                prefix_error=False,
                encoding="UTF-8")
        except Exception:
            log.error(traceback.format_exc())
            h.flash(_('error occurred during creation of users group %s') \
                    % request.POST.get('users_group_name'), category='error')

        return redirect(url('users_groups'))

    def new(self, format='html'):
        """GET /users_groups/new: Form to create a new item"""
        # url('new_users_group')
        return render('admin/users_groups/users_group_add.html')

    def update(self, id):
        """PUT /users_groups/id: Update an existing item"""
        # Forms posted to this method should contain a hidden field:
        #    <input type="hidden" name="_method" value="PUT" />
        # Or using helpers:
        #    h.form(url('users_group', id=ID),
        #           method='put')
        # url('users_group', id=ID)

        c.users_group = UsersGroup.get(id)
        c.group_members_obj = [x.user for x in c.users_group.members]
        c.group_members = [(x.user_id, x.username) for x in
                           c.group_members_obj]

        c.available_members = [(x.user_id, x.username) for x in
                               self.sa.query(User).all()]

        available_members = [safe_unicode(x[0]) for x in c.available_members]

        users_group_form = UsersGroupForm(edit=True,
                                          old_data=c.users_group.get_dict(),
                                          available_members=available_members)()

        try:
            form_result = users_group_form.to_python(request.POST)
            UsersGroupModel().update(c.users_group, form_result)
            gr = form_result['users_group_name']
            action_logger(self.rhodecode_user,
                          'admin_updated_users_group:%s' % gr,
                          None, self.ip_addr, self.sa)
            h.flash(_('updated users group %s') % gr, category='success')
            Session.commit()
        except formencode.Invalid, errors:
            e = errors.error_dict or {}

            perm = Permission.get_by_key('hg.create.repository')
            e.update({'create_repo_perm':
                         UsersGroupModel().has_perm(id, perm)})

            return htmlfill.render(
                render('admin/users_groups/users_group_edit.html'),
                defaults=errors.value,
                errors=e,
                prefix_error=False,
                encoding="UTF-8")
        except Exception:
            log.error(traceback.format_exc())
            h.flash(_('error occurred during update of users group %s') \
                    % request.POST.get('users_group_name'), category='error')

        return redirect(url('users_groups'))

    def delete(self, id):
        """DELETE /users_groups/id: Delete an existing item"""
        # Forms posted to this method should contain a hidden field:
        #    <input type="hidden" name="_method" value="DELETE" />
        # Or using helpers:
        #    h.form(url('users_group', id=ID),
        #           method='delete')
        # url('users_group', id=ID)

        try:
            UsersGroupModel().delete(id)
            Session.commit()
            h.flash(_('successfully deleted users group'), category='success')
        except UsersGroupsAssignedException, e:
            h.flash(e, category='error')
        except Exception:
            log.error(traceback.format_exc())
            h.flash(_('An error occurred during deletion of users group'),
                    category='error')
        return redirect(url('users_groups'))

    def show(self, id, format='html'):
        """GET /users_groups/id: Show a specific item"""
        # url('users_group', id=ID)

    def edit(self, id, format='html'):
        """GET /users_groups/id/edit: Form to edit an existing item"""
        # url('edit_users_group', id=ID)

        c.users_group = self.sa.query(UsersGroup).get(id)
        if not c.users_group:
            return redirect(url('users_groups'))

        c.users_group.permissions = {}
        c.group_members_obj = [x.user for x in c.users_group.members]
        c.group_members = [(x.user_id, x.username) for x in
                           c.group_members_obj]
        c.available_members = [(x.user_id, x.username) for x in
                               self.sa.query(User).all()]
        defaults = c.users_group.get_dict()
        perm = Permission.get_by_key('hg.create.repository')
        defaults.update({'create_repo_perm':
                         UsersGroupModel().has_perm(c.users_group, perm)})
        return htmlfill.render(
            render('admin/users_groups/users_group_edit.html'),
            defaults=defaults,
            encoding="UTF-8",
            force_defaults=False
        )

    def update_perm(self, id):
        """PUT /users_perm/id: Update an existing item"""
        # url('users_group_perm', id=ID, method='put')

        grant_perm = request.POST.get('create_repo_perm', False)

        if grant_perm:
            perm = Permission.get_by_key('hg.create.none')
            UsersGroupModel().revoke_perm(id, perm)

            perm = Permission.get_by_key('hg.create.repository')
            UsersGroupModel().grant_perm(id, perm)
            h.flash(_("Granted 'repository create' permission to user"),
                    category='success')

            Session.commit()
        else:
            perm = Permission.get_by_key('hg.create.repository')
            UsersGroupModel().revoke_perm(id, perm)

            perm = Permission.get_by_key('hg.create.none')
            UsersGroupModel().grant_perm(id, perm)
            h.flash(_("Revoked 'repository create' permission to user"),
                    category='success')
            Session.commit()
        return redirect(url('edit_users_group', id=id))