from sqlalchemy.sql.expression import or_, and_, func

from kallithea.model.db import UserLog

from kallithea.lib.base import BaseController, render

from kallithea.lib.utils2 import safe_int, remove_prefix, remove_suffix

from kallithea.lib.indexers import JOURNAL_SCHEMA

    def __before__(self):

        super(AdminController, self).__before__()

    def index(self):

        users_log = UserLog.query() \

                .options(joinedload(UserLog.user)) \

from kallithea.lib import helpers as h

from kallithea.lib.compat import formatted_json

from kallithea.lib.base import BaseController, render

from kallithea.lib import auth_modules

from kallithea.model.forms import AuthSettingsForm

from kallithea.model.db import Setting

class AuthSettingsController(BaseController):

    @LoginRequired()

    def __before__(self):

        super(AuthSettingsController, self).__before__()

from webob.exc import HTTPFound

from kallithea.lib import helpers as h

from kallithea.lib.base import BaseController, render

from kallithea.model.forms import DefaultsForm

from kallithea.model.meta import Session

    #     map.resource('default', 'defaults')

    @LoginRequired()

    def __before__(self):

        super(DefaultsController, self).__before__()

from webob.exc import HTTPFound

from kallithea.lib import helpers as h

from kallithea.lib.base import BaseController, render

from kallithea.model.forms import DefaultPermissionsForm

from kallithea.model.permission import PermissionModel

    #     map.resource('permission', 'permissions')

    @LoginRequired()

    def __before__(self):

        super(PermissionsController, self).__before__()

from kallithea.lib import helpers as h

from kallithea.lib.compat import json

from kallithea.lib.auth import LoginRequired, \

from kallithea.lib.base import BaseController, render

from kallithea.model.db import RepoGroup, Repository

from kallithea.model.scm import RepoGroupList, AvailableRepoGroupChoices

    def new(self):

        """GET /repo_groups/new: Form to create a new item"""

        # url('new_repos_group')

            #we're global admin, we're ok and we can create TOP level groups

            pass

        else:

            group_id = safe_int(request.GET.get('parent_group'))

            group = RepoGroup.get(group_id) if group_id else None

            group_name = group.group_name if group else None

                pass

            else:

                raise HTTPForbidden()

                             exclude=[c.repo_group])

        # TODO: kill allow_empty_group - it is only used for redundant form validation!

            #we're global admin, we're ok and we can create TOP level groups

            allow_empty_group = True

        elif not c.repo_group.parent_group:

from kallithea.lib import helpers as h

from kallithea.lib.auth import LoginRequired, \

from kallithea.lib.base import BaseRepoController, render

from kallithea.lib.utils import action_logger, jsonify

from kallithea.lib.vcs import RepositoryError

            return {'result': True}

        return {'result': False}

    def update(self, repo_name):

        """

        PUT /repos/repo_name: Update an existing item"""

                    % repo_name, category='error')

        raise HTTPFound(location=url('edit_repo', repo_name=changed_name))

    def delete(self, repo_name):

        """

        DELETE /repos/repo_name: Delete an existing item"""

            raise HTTPFound(location=url('repos_group_home', group_name=repo.group.group_name))

        raise HTTPFound(location=url('repos'))

    def edit(self, repo_name):

        """GET /repo_name/settings: Form to edit an existing item"""

        # url('edit_repo', repo_name=ID)

            encoding="UTF-8",

            force_defaults=False)

    def edit_permissions(self, repo_name):

        """GET /repo_name/settings: Form to edit an existing item"""

        # url('edit_repo', repo_name=ID)

                    category='error')

            raise HTTPInternalServerError()

    def edit_fields(self, repo_name):

        """GET /repo_name/settings: Form to edit an existing item"""

        # url('edit_repo', repo_name=ID)

            raise HTTPFound(location=url('repo_edit_fields'))

        return render('admin/repos/repo_edit.html')

    def create_repo_field(self, repo_name):

        try:

            form_result = RepoFieldForm()().to_python(dict(request.POST))

            h.flash(msg, category='error')

        raise HTTPFound(location=url('edit_repo_fields', repo_name=repo_name))

    def delete_repo_field(self, repo_name, field_id):

        field = RepositoryField.get_or_404(field_id)

        try:

            h.flash(msg, category='error')

        raise HTTPFound(location=url('edit_repo_fields', repo_name=repo_name))

    def edit_advanced(self, repo_name):

        """GET /repo_name/settings: Form to edit an existing item"""

        # url('edit_repo', repo_name=ID)

            encoding="UTF-8",

            force_defaults=False)

    def edit_advanced_journal(self, repo_name):

        """

        Sets this repository to be visible in public journal,

        raise HTTPFound(location=url('edit_repo_advanced', repo_name=repo_name))

    def edit_advanced_fork(self, repo_name):

        """

        Mark given repository as a fork of another

        raise HTTPFound(location=url('edit_repo_advanced', repo_name=repo_name))

    def edit_advanced_locking(self, repo_name):

        """

        Unlock repository when it is locked !

                    category='error')

        raise HTTPFound(location=url('summary_home', repo_name=repo_name))

    def edit_caches(self, repo_name):

        """GET /repo_name/settings: Form to edit an existing item"""

        # url('edit_repo', repo_name=ID)

            raise HTTPFound(location=url('edit_repo_caches', repo_name=c.repo_name))

        return render('admin/repos/repo_edit.html')

    def edit_remote(self, repo_name):

        """GET /repo_name/settings: Form to edit an existing item"""

        # url('edit_repo', repo_name=ID)

            raise HTTPFound(location=url('edit_repo_remote', repo_name=c.repo_name))

        return render('admin/repos/repo_edit.html')

    def edit_statistics(self, repo_name):

        """GET /repo_name/settings: Form to edit an existing item"""

        # url('edit_repo', repo_name=ID)

from webob.exc import HTTPFound

from kallithea.lib import helpers as h

from kallithea.lib.base import BaseController, render

from kallithea.lib.celerylib import tasks, run_task

from kallithea.lib.exceptions import HgsubversionImportError

            settings[k] = v

        return settings

    def settings_vcs(self):

        """GET /admin/settings: All items in the collection"""

        # url('admin_settings')

            encoding="UTF-8",

            force_defaults=False)

    def settings_mapping(self):

        """GET /admin/settings/mapping: All items in the collection"""

        # url('admin_settings_mapping')

            encoding="UTF-8",

            force_defaults=False)

    def settings_global(self):

        """GET /admin/settings/global: All items in the collection"""

        # url('admin_settings_global')

            encoding="UTF-8",

            force_defaults=False)

    def settings_visual(self):

        """GET /admin/settings/visual: All items in the collection"""

        # url('admin_settings_visual')

            encoding="UTF-8",

            force_defaults=False)

    def settings_email(self):

        """GET /admin/settings/email: All items in the collection"""

        # url('admin_settings_email')

            encoding="UTF-8",

            force_defaults=False)

    def settings_hooks(self):

        """GET /admin/settings/hooks: All items in the collection"""

        # url('admin_settings_hooks')

            encoding="UTF-8",

            force_defaults=False)

    def settings_search(self):

        """GET /admin/settings/search: All items in the collection"""

        # url('admin_settings_search')

            encoding="UTF-8",

            force_defaults=False)

    def settings_system(self):

        """GET /admin/settings/system: All items in the collection"""

        # url('admin_settings_system')

            encoding="UTF-8",

            force_defaults=False)

    def settings_system_update(self):

        """GET /admin/settings/system/updates: All items in the collection"""

        # url('admin_settings_system_update')

from kallithea.lib.exceptions import DefaultUserException, \

    UserOwnsReposException, UserCreationError

from kallithea.lib import helpers as h

    AuthUser

from kallithea.lib import auth_modules

from kallithea.lib.auth_modules import auth_internal

    """REST Controller styled on the Atom Publishing Protocol"""

    @LoginRequired()

    def __before__(self):

        super(UsersController, self).__before__()

        c.available_permissions = config['available_permissions']

from kallithea import EXTERN_TYPE_INTERNAL

from kallithea.controllers.api import JSONRPCController, JSONRPCError

from kallithea.lib.auth import (

    HasPermissionAnyDecorator, HasPermissionAnyApi, HasRepoPermissionAnyApi,

    HasRepoGroupPermissionAnyApi, HasUserGroupPermissionAny)

from kallithea.lib.utils import map_groups, repo2db_mapper

    """

    def test(self, apiuser, args):

        return args

    def pull(self, apiuser, repoid):

        """

        Triggers a pull from remote location on given repo. Can be used to

                'Unable to pull changes from `%s`' % repo.repo_name

            )

    def rescan_repos(self, apiuser, remove_obsolete=Optional(False)):

        """

        Triggers rescan repositories action. If remove_obsolete is set

        return ret

    def get_ip(self, apiuser, userid=Optional(OAttr('apiuser'))):

        """

        Shows IP address as seen from Kallithea server, together with all

    # alias for old

    show_ip = get_ip

    def get_server_info(self, apiuser):

        """

        return server info, including Kallithea version and installed packages

        data['permissions'] = AuthUser(user_id=user.user_id).permissions

        return data

    def get_users(self, apiuser):

        """

        Lists all existing users. This command can be executed only using api_key

            result.append(user.get_api_data())

        return result

    def create_user(self, apiuser, username, email, password=Optional(''),

                    firstname=Optional(''), lastname=Optional(''),

                    active=Optional(True), admin=Optional(False),

            log.error(traceback.format_exc())

            raise JSONRPCError('failed to create user `%s`' % (username,))

    def update_user(self, apiuser, userid, username=Optional(None),

                    email=Optional(None), password=Optional(None),

                    firstname=Optional(None), lastname=Optional(None),

            log.error(traceback.format_exc())

            raise JSONRPCError('failed to update user `%s`' % (userid,))

    def delete_user(self, apiuser, userid):

        """

        deletes given user if such user exists. This command can

                'failed to delete repository `%s`' % (repo.repo_name,)

            )

    def grant_user_permission(self, apiuser, repoid, userid, perm):

        """

        Grant permission for user on given repository, or update existing one

                )

            )

    def revoke_user_permission(self, apiuser, repoid, userid):

        """

        Revoke permission for user on given repository. This command can be executed

                )

            )

    def get_repo_group(self, apiuser, repogroupid):

        """

        Returns given repo group together with permissions, and repositories

        data["members"] = members

        return data

    def get_repo_groups(self, apiuser):

        """

        Returns all repository groups

            result.append(repo_group.get_api_data())

        return result

    def create_repo_group(self, apiuser, group_name, description=Optional(''),

                          owner=Optional(OAttr('apiuser')),

                          parent=Optional(None),

            log.error(traceback.format_exc())

            raise JSONRPCError('failed to create repo group `%s`' % (group_name,))

    def update_repo_group(self, apiuser, repogroupid, group_name=Optional(''),

                          description=Optional(''),

                          owner=Optional(OAttr('apiuser')),

            raise JSONRPCError('failed to update repository group `%s`'

                               % (repogroupid,))

    def delete_repo_group(self, apiuser, repogroupid):

        """

        raise Exception('You have to write this function in child class')

class HasPermissionAnyDecorator(PermsDecorator):

    """

    Checks for access permission for any of given predicates. In order to

        return False

class HasRepoPermissionAnyDecorator(PermsDecorator):

    """

    Checks for access permission for any of given predicates for specific

        return False

class HasRepoGroupPermissionAnyDecorator(PermsDecorator):

    """

    Checks for access permission for any of given predicates for specific

        return False

class HasUserGroupPermissionAnyDecorator(PermsDecorator):

    """

    Checks for access permission for any of given predicates for specific

        cls_name = self.__class__.__name__

        check_scope = {

            'HasPermissionAny': '',

            'HasRepoPermissionAny': 'repo:%s' % self.repo_name,

            'HasRepoGroupPermissionAny': 'group:%s' % self.group_name,

        }.get(cls_name, '?')

        log.debug('checking cls:%s %s usr:%s %s @ %s', cls_name,

        raise Exception('You have to write this function in child class')

class HasPermissionAny(PermsFunction):

    def check_permissions(self):

        if self.required_perms.intersection(self.user_perms.get('global')):

        return False

class HasRepoPermissionAny(PermsFunction):

    def __call__(self, repo_name=None, check_location='', user=None):

        self.repo_name = repo_name

        return False

class HasUserGroupPermissionAny(PermsFunction):

    def __call__(self, user_group_name=None, check_location='', user=None):

        self.user_group_name = user_group_name

        return False

#==============================================================================

# SPECIAL VERSION TO HANDLE MIDDLEWARE AUTH

#==============================================================================

        raise NotImplementedError()

class HasPermissionAnyApi(_BaseApiPerm):

    def check_permissions(self, perm_defs, repo_name=None, group_name=None):

        if self.required_perms.intersection(perm_defs.get('global')):

        return False

class HasRepoPermissionAnyApi(_BaseApiPerm):

    def check_permissions(self, perm_defs, repo_name=None, group_name=None):

        try:

            return True

        return False

def check_ip_access(source_ip, allowed_ips=None):

    """

#==============================================================================

# PERMS

#==============================================================================

#==============================================================================

from kallithea.lib.utils2 import safe_str, safe_unicode, get_server_url, \

    _set_extras

from kallithea.lib.auth import HasRepoPermissionAny, HasRepoGroupPermissionAny, \

from kallithea.lib.utils import get_filesystem_repos, make_ui, \

    action_logger

from kallithea.model import BaseModel

    Top level is -1.

    """

    groups = RepoGroup.query().all()

        groups.append(None)

    else:

        groups = list(RepoGroupList(groups, perm_set=repo_group_perms))

          <input id="branch_switcher" name="branch_switcher" type="hidden">

        </li>

        <li ${is_current('options')} data-context="options">

               <a href="${h.url('edit_repo',repo_name=c.repo_name)}" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-haspopup="true"><i class="icon-wrench"></i> ${_('Options')} <i class="caret"></i></a>

             %else:

               <a href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-haspopup="true"><i class="icon-wrench"></i> ${_('Options')} <i class="caret"></i></a>

             %endif

          <ul class="dropdown-menu" role="menu">

                   <li><a href="${h.url('edit_repo',repo_name=c.repo_name)}"><i class="icon-gear"></i> ${_('Settings')}</a></li>

             %endif

              %if c.db_repo.fork:

          <i class="icon-search"></i> ${_('Search')}

        </a>

    </li>

      <li ${is_current('admin')} class="dropdown">

        <a class="menu_link dropdown-toggle" data-toggle="dropdown" role="button" title="${_('Admin')}" href="${h.url('admin_home')}">

          <i class="icon-gear"></i> ${_('Admin')} <span class="caret"></span>

         <div style="padding:0 10px 10px 17px;">

         %if c.no_data:

           ${c.no_data_msg}

                ${h.link_to(_('Enable'),h.url('edit_repo',repo_name=c.repo_name),class_="btn btn-mini")}

           %endif

        %else:

                <div id="lang_stats"></div>

                %else:

                   ${_('Statistics are disabled for this repository')}

                        ${h.link_to(_('Enable'),h.url('edit_repo',repo_name=c.repo_name, anchor='repo_enable_statistics'),class_="btn btn-mini")}

                   %endif

                %endif

                  ${_('There are no downloads yet')}

                %elif not c.enable_downloads:

                  ${_('Downloads are disabled for this repository')}

                        ${h.link_to(_('Enable'),h.url('edit_repo',repo_name=c.repo_name, anchor='repo_enable_downloads'),class_="btn btn-mini")}

                    %endif

                %else: