Files @ fdf9f6ee5217
Branch filter:

Location: kallithea/pylons_app/controllers/users.py - annotation

Marcin Kuzminski
Implemented permissions into hg app, secured admin controllers, templates and repository specific controllers
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
3782a6d698af
61be6dcd49a0
a83a1799480c
a83a1799480c
a55c17874486
a83a1799480c
61be6dcd49a0
fcab58c43ea1
fcab58c43ea1
fcab58c43ea1
fdf9f6ee5217
fcab58c43ea1
61be6dcd49a0
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
61be6dcd49a0
fcab58c43ea1
61be6dcd49a0
f6ac79182600
f6ac79182600
f6ac79182600
b68b2246e5a6
b18f89d6d17f
b18f89d6d17f
f6ac79182600
f6ac79182600
f6ac79182600
8e250e86a670
a0116e944da1
20dc7a5eb748
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
fcab58c43ea1
fcab58c43ea1
a55c17874486
73f413946c14
fcab58c43ea1
fcab58c43ea1
0e5455fda8fd
0e5455fda8fd
fcab58c43ea1
fcab58c43ea1
fcab58c43ea1
fcab58c43ea1
fcab58c43ea1
fcab58c43ea1
0e5455fda8fd
0e5455fda8fd
0e5455fda8fd
0e5455fda8fd
73f413946c14
f6ac79182600
f6ac79182600
f6ac79182600
20dc7a5eb748
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
fcab58c43ea1
0e5455fda8fd
73f413946c14
0e5455fda8fd
fcab58c43ea1
a55c17874486
fcab58c43ea1
fcab58c43ea1
fcab58c43ea1
fcab58c43ea1
fcab58c43ea1
fcab58c43ea1
fcab58c43ea1
fcab58c43ea1
0e5455fda8fd
0e5455fda8fd
0e5455fda8fd
0e5455fda8fd
0e5455fda8fd
61be6dcd49a0
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
f6ac79182600
0e5455fda8fd
8e250e86a670
0e5455fda8fd
a55c17874486
fdf9f6ee5217
fdf9f6ee5217
0e5455fda8fd
0e5455fda8fd
fdf9f6ee5217
8e250e86a670
8e250e86a670
f6ac79182600
f6ac79182600
f6ac79182600
73f413946c14
8e250e86a670
f6ac79182600
f6ac79182600
f6ac79182600
a0116e944da1
fdf9f6ee5217
fdf9f6ee5217
fdf9f6ee5217
fdf9f6ee5217
fdf9f6ee5217
9a2affee4a45
73f413946c14
20dc7a5eb748
9a2affee4a45
73f413946c14
73f413946c14
73f413946c14
#!/usr/bin/env python
# encoding: utf-8
# users controller for pylons
# Copyright (C) 2009-2010 Marcin Kuzminski <marcin@python-works.com>
 
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; version 2
# of the License or (at your opinion) any later version of the license.
# 
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
# 
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
# MA  02110-1301, USA.
"""
Created on April 4, 2010
users controller for pylons
@author: marcink
"""
from formencode import htmlfill
from pylons import request, session, tmpl_context as c, url
from pylons.controllers.util import abort, redirect
from pylons.i18n.translation import _
from pylons_app.lib import helpers as h
from pylons_app.lib.auth import LoginRequired, HasPermissionAllDecorator
from pylons_app.lib.base import BaseController, render
from pylons_app.model.db import User, UserLog
from pylons_app.model.forms import UserForm
from pylons_app.model.user_model import UserModel, DefaultUserException
import formencode
import logging

log = logging.getLogger(__name__)

class UsersController(BaseController):
    """REST Controller styled on the Atom Publishing Protocol"""
    # To properly map this controller, ensure your config/routing.py
    # file has a resource setup:
    #     map.resource('user', 'users')
    
    @LoginRequired()
    @HasPermissionAllDecorator('hg.admin')
    def __before__(self):
        c.admin_user = session.get('admin_user')
        c.admin_username = session.get('admin_username')
        super(UsersController, self).__before__()
    

    def index(self, format='html'):
        """GET /users: All items in the collection"""
        # url('users')
        
        c.users_list = self.sa.query(User).all()     
        return render('admin/users/users.html')
    
    def create(self):
        """POST /users: Create a new item"""
        # url('users')
        
        user_model = UserModel()
        login_form = UserForm()()
        try:
            form_result = login_form.to_python(dict(request.POST))
            user_model.create(form_result)
            h.flash(_('created user %s') % form_result['username'],
                    category='success')
        except formencode.Invalid as errors:
            c.form_errors = errors.error_dict
            return htmlfill.render(
                 render('admin/users/user_add.html'),
                defaults=errors.value,
                encoding="UTF-8")
        except Exception:
            h.flash(_('error occured during creation of user %s') \
                    % form_result['username'], category='error')            
        return redirect(url('users'))
    
    def new(self, format='html'):
        """GET /users/new: Form to create a new item"""
        # url('new_user')
        return render('admin/users/user_add.html')

    def update(self, id):
        """PUT /users/id: Update an existing item"""
        # Forms posted to this method should contain a hidden field:
        #    <input type="hidden" name="_method" value="PUT" />
        # Or using helpers:
        #    h.form(url('user', id=ID),
        #           method='put')
        # url('user', id=ID)
        user_model = UserModel()
        _form = UserForm(edit=True)()
        try:
            form_result = _form.to_python(dict(request.POST))
            user_model.update(id, form_result)
            h.flash(_('User updated succesfully'), category='success')
                           
        except formencode.Invalid as errors:
            c.user = user_model.get_user(id)
            c.form_errors = errors.error_dict
            return htmlfill.render(
                 render('admin/users/user_edit.html'),
                defaults=errors.value,
                encoding="UTF-8")
        except Exception:
            h.flash(_('error occured during update of user %s') \
                    % form_result['username'], category='error')
            
        return redirect(url('users'))
    
    def delete(self, id):
        """DELETE /users/id: Delete an existing item"""
        # Forms posted to this method should contain a hidden field:
        #    <input type="hidden" name="_method" value="DELETE" />
        # Or using helpers:
        #    h.form(url('user', id=ID),
        #           method='delete')
        # url('user', id=ID)
        user_model = UserModel()
        try:
            user_model.delete(id)
            h.flash(_('sucessfully deleted user'), category='success')
        except DefaultUserException as e:
            h.flash(str(e), category='warning')
        except Exception:
            h.flash(_('An error occured during deletion of user'),
                    category='error')            
        return redirect(url('users'))
        
    def show(self, id, format='html'):
        """GET /users/id: Show a specific item"""
        # url('user', id=ID)
    
    
    def edit(self, id, format='html'):
        """GET /users/id/edit: Form to edit an existing item"""
        # url('edit_user', id=ID)
        c.user = self.sa.query(User).get(id)
        if c.user.username == 'default':
            h.flash(_("You can't edit this user since it's" 
              " crucial for entire application"), category='warning')
            return redirect(url('users'))
        
        defaults = c.user.__dict__
        return htmlfill.render(
            render('admin/users/user_edit.html'),
            defaults=defaults,
            encoding="UTF-8",
            force_defaults=False
        )