HasPermissionAnyDecorator, HasRepoPermissionAllDecorator, NotAnonymous,\

    HasPermissionAny, HasReposGroupPermissionAny, HasRepoPermissionAnyDecorator

from rhodecode.lib.base import BaseRepoController, render

from rhodecode.lib.utils import action_logger, repo_name_slug

from rhodecode.lib.helpers import get_token

from rhodecode.model.meta import Session

from rhodecode.model.db import User, Repository, UserFollowing, RepoGroup,\

    RhodeCodeSetting, RepositoryField

from rhodecode.model.forms import RepoForm, RepoFieldForm, RepoPermsForm

from rhodecode.model.scm import ScmModel, RepoGroupList, RepoList

from rhodecode.model.repo import RepoModel

from rhodecode.lib.compat import json

from sqlalchemy.sql.expression import func

from rhodecode.lib.exceptions import AttachedForksError

from rhodecode.lib.utils2 import safe_int

log = logging.getLogger(__name__)

class ReposController(BaseRepoController):

    """

    REST Controller styled on the Atom Publishing Protocol"""

    # To properly map this controller, ensure your config/routing.py

    # file has a resource setup:

    #     map.resource('repo', 'repos')

    @LoginRequired()

    def __before__(self):

        super(ReposController, self).__before__()

    def __load_defaults(self):

        acl_groups = RepoGroupList(RepoGroup.query().all(),

                               perm_set=['group.write', 'group.admin'])

        c.repo_groups = RepoGroup.groups_choices(groups=acl_groups)

        c.repo_groups_choices = map(lambda k: unicode(k[0]), c.repo_groups)

        repo_model = RepoModel()

        c.users_array = repo_model.get_users_js()

        c.users_groups_array = repo_model.get_users_groups_js()

        choices, c.landing_revs = ScmModel().get_repo_landing_revs()

        c.landing_revs_choices = choices

    def __load_data(self, repo_name=None):

        """

        Load defaults settings for edit, and update

        :param repo_name:

        """

        self.__load_defaults()

        c.repo_info = db_repo = Repository.get_by_repo_name(repo_name)

        repo = db_repo.scm_instance

        if c.repo_info is None:

            h.not_mapped_error(repo_name)

            return redirect(url('repos'))

        ##override defaults for exact repo info here git/hg etc

        choices, c.landing_revs = ScmModel().get_repo_landing_revs(c.repo_info)

        c.landing_revs_choices = choices

        c.default_user_id = User.get_default_user().user_id

        c.in_public_journal = UserFollowing.query()\

            .filter(UserFollowing.user_id == c.default_user_id)\

            .filter(UserFollowing.follows_repository == c.repo_info).scalar()

        if c.repo_info.stats:

            # this is on what revision we ended up so we add +1 for count

            last_rev = c.repo_info.stats.stat_on_revision + 1

        else:

            last_rev = 0

        c.stats_revision = last_rev

        c.repo_last_rev = repo.count() if repo.revisions else 0

        if last_rev == 0 or c.repo_last_rev == 0:

            c.stats_percentage = 0

        else:

            c.stats_percentage = '%.2f' % ((float((last_rev)) /

                                            c.repo_last_rev) * 100)

        c.repo_fields = RepositoryField.query()\

            .filter(RepositoryField.repository == db_repo).all()

        defaults = RepoModel()._get_defaults(repo_name)

        _repos = Repository.query().order_by(Repository.repo_name).all()

        read_access_repos = RepoList(_repos)

        c.repos_list = [('', _('--REMOVE FORK--'))]

        c.repos_list += [(x.repo_id, x.repo_name)

                         for x in read_access_repos

                         if x.repo_id != c.repo_info.repo_id]

        defaults['id_fork_of'] = db_repo.fork.repo_id if db_repo.fork else ''

        return defaults

    def index(self, format='html'):

        """GET /repos: All items in the collection"""

        # url('repos')

        repos_data = RepoModel().get_repos_as_dict(repos_list=c.repos_list,

                                                   admin=True,

                                                   super_user_actions=True)

        #json used to render the grid

        c.data = json.dumps(repos_data)

        return render('admin/repos/repos.html')

    @NotAnonymous()

    def create(self):

        """

        POST /repos: Create a new item"""

        # url('repos')

        self.__load_defaults()

        form_result = {}

        try:

            form_result = RepoForm(repo_groups=c.repo_groups_choices,

                                   landing_revs=c.landing_revs_choices)()\

                            .to_python(dict(request.POST))

            new_repo = RepoModel().create(form_result,

                                          self.rhodecode_user.user_id)

            if form_result['clone_uri']:

                h.flash(_('Created repository %s from %s') \

                    % (form_result['repo_name'], form_result['clone_uri']),

                    category='success')

            else:

                repo_url = h.link_to(form_result['repo_name'],

                    h.url('summary_home', repo_name=form_result['repo_name_full']))

                h.flash(h.literal(_('Created repository %s') % repo_url),

                        category='success')

            if request.POST.get('user_created'):

                # created by regular non admin user

                action_logger(self.rhodecode_user, 'user_created_repo',

                              form_result['repo_name_full'], self.ip_addr,

                              self.sa)

            else:

                action_logger(self.rhodecode_user, 'admin_created_repo',

                              form_result['repo_name_full'], self.ip_addr,

                              self.sa)

            Session().commit()

        except formencode.Invalid, errors:

            return htmlfill.render(

                render('admin/repos/repo_add.html'),

                defaults=errors.value,

                errors=errors.error_dict or {},

                prefix_error=False,

                encoding="UTF-8")

        except Exception:

            log.error(traceback.format_exc())

            msg = _('Error creating repository %s') \

                    % form_result.get('repo_name')

            h.flash(msg, category='error')

            if c.rhodecode_user.is_admin:

                return redirect(url('repos'))

            return redirect(url('home'))

        #redirect to our new repo !

        return redirect(url('summary_home', repo_name=new_repo.repo_name))

    @NotAnonymous()

    def create_repository(self):

        """GET /_admin/create_repository: Form to create a new item"""

        new_repo = request.GET.get('repo', '')

        parent_group = request.GET.get('parent_group')

        if not HasPermissionAny('hg.admin', 'hg.create.repository')():

            #you're not super admin nor have global create permissions,

            #but maybe you have at least write permission to a parent group ?

            _gr = RepoGroup.get(parent_group)

            gr_name = _gr.group_name if _gr else None

            if not HasReposGroupPermissionAny('group.admin', 'group.write')(group_name=gr_name):

                raise HTTPForbidden

        acl_groups = RepoGroupList(RepoGroup.query().all(),

                               perm_set=['group.write', 'group.admin'])

        c.repo_groups = RepoGroup.groups_choices(groups=acl_groups)

        c.repo_groups_choices = map(lambda k: unicode(k[0]), c.repo_groups)

        choices, c.landing_revs = ScmModel().get_repo_landing_revs()

        c.new_repo = repo_name_slug(new_repo)

        ## apply the defaults from defaults page

        defaults = RhodeCodeSetting.get_default_repo_settings(strip_prefix=True)

        if parent_group:

            defaults.update({'repo_group': parent_group})

        return htmlfill.render(

            render('admin/repos/repo_add.html'),

            defaults=defaults,

            errors={},

            prefix_error=False,

            encoding="UTF-8"

        )

class CookieStoreWrapper(object):

    def __init__(self, cookie_store):

        self.cookie_store = cookie_store

    def __repr__(self):

        return 'CookieStore<%s>' % (self.cookie_store)

    def get(self, key, other=None):

        if isinstance(self.cookie_store, dict):

            return self.cookie_store.get(key, other)

        elif isinstance(self.cookie_store, AuthUser):

            return self.cookie_store.__dict__.get(key, other)

class  AuthUser(object):

    """

    A simple object that handles all attributes of user in RhodeCode

    It does lookup based on API key,given user, or user present in session

    Then it fills all required information for such user. It also checks if

    anonymous access is enabled and if so, it returns default user as logged

    in

    """

    def __init__(self, user_id=None, api_key=None, username=None, ip_addr=None):

        self.user_id = user_id

        self.api_key = None

        self.username = username

        self.ip_addr = ip_addr

        self.name = ''

        self.lastname = ''

        self.email = ''

        self.is_authenticated = False

        self.admin = False

        self.inherit_default_permissions = False

        self.permissions = {}

        self._api_key = api_key

        self.propagate_data()

        self._instance = None

    def propagate_data(self):

        user_model = UserModel()

        self.anonymous_user = User.get_by_username('default', cache=True)

        is_user_loaded = False

        # try go get user by api key

        if self._api_key and self._api_key != self.anonymous_user.api_key:

            log.debug('Auth User lookup by API KEY %s' % self._api_key)

            is_user_loaded = user_model.fill_data(self, api_key=self._api_key)

        # lookup by userid

        elif (self.user_id is not None and

              self.user_id != self.anonymous_user.user_id):

            log.debug('Auth User lookup by USER ID %s' % self.user_id)

            is_user_loaded = user_model.fill_data(self, user_id=self.user_id)

        # lookup by username

        elif self.username and \

            str2bool(config.get('container_auth_enabled', False)):

            log.debug('Auth User lookup by USER NAME %s' % self.username)

            dbuser = login_container_auth(self.username)

            if dbuser is not None:

                log.debug('filling all attributes to object')

                for k, v in dbuser.get_dict().items():

                    setattr(self, k, v)

                self.set_authenticated()

                is_user_loaded = True

        else:

            log.debug('No data in %s that could been used to log in' % self)

        if not is_user_loaded:

            # if we cannot authenticate user try anonymous

            if self.anonymous_user.active:

                user_model.fill_data(self, user_id=self.anonymous_user.user_id)

                # then we set this user is logged in

                self.is_authenticated = True

            else:

                self.user_id = None

                self.username = None

                self.is_authenticated = False

        if not self.username:

            self.username = 'None'

        log.debug('Auth User is now %s' % self)

        user_model.fill_perms(self)

    @property

    def is_admin(self):

        return self.admin

    @property

        """

        Returns list of repositories you're an admin of

        """

        return [x[0] for x in self.permissions['repositories'].iteritems()

                if x[1] == 'repository.admin']

    @property

    def repository_groups_admin(self):

        """

        Returns list of repository groups you're an admin of

        """

        return [x[0] for x in self.permissions['repositories_groups'].iteritems()

                if x[1] == 'group.admin']

    @property

    def user_groups_admin(self):

        """

        Returns list of user groups you're an admin of

        """

        return [x[0] for x in self.permissions['user_groups'].iteritems()

                if x[1] == 'usergroup.admin']

    @property

    def ip_allowed(self):

        """

        Checks if ip_addr used in constructor is allowed from defined list of

        allowed ip_addresses for user

        :returns: boolean, True if ip is in allowed ip range

        """

        #check IP

        allowed_ips = AuthUser.get_allowed_ips(self.user_id, cache=True)

        if check_ip_access(source_ip=self.ip_addr, allowed_ips=allowed_ips):

            log.debug('IP:%s is in range of %s' % (self.ip_addr, allowed_ips))

            return True

        else:

            log.info('Access for IP:%s forbidden, '

                     'not in %s' % (self.ip_addr, allowed_ips))

            return False

    def __repr__(self):

        return "<AuthUser('id:%s:%s|%s')>" % (self.user_id, self.username,

                                              self.is_authenticated)

    def set_authenticated(self, authenticated=True):

        if self.user_id != self.anonymous_user.user_id:

            self.is_authenticated = authenticated

    def get_cookie_store(self):

        return {'username': self.username,

                'user_id': self.user_id,

                'is_authenticated': self.is_authenticated}

    @classmethod

    def from_cookie_store(cls, cookie_store):

        """

        Creates AuthUser from a cookie store

        :param cls:

        :param cookie_store:

        """

        user_id = cookie_store.get('user_id')

        username = cookie_store.get('username')

        api_key = cookie_store.get('api_key')

        return AuthUser(user_id, api_key, username)

    @classmethod

    def get_allowed_ips(cls, user_id, cache=False):

        _set = set()

        user_ips = UserIpMap.query().filter(UserIpMap.user_id == user_id)

        if cache:

            user_ips = user_ips.options(FromCache("sql_cache_short",

                                                  "get_user_ips_%s" % user_id))

        for ip in user_ips:

            try:

                _set.add(ip.ip_addr)

            except ObjectDeletedError:

                # since we use heavy caching sometimes it happens that we get

                # deleted objects here, we just skip them

                pass

        return _set or set(['0.0.0.0/0', '::/0'])

def set_available_permissions(config):

    """

    This function will propagate pylons globals with all available defined

    permission given in db. We don't want to check each time from db for new

    permissions since adding a new permission also requires application restart

    ie. to decorate new views with the newly created permission

    :param config: current pylons config instance

    """

    log.info('getting information about all available permissions')

    try:

        sa = meta.Session

## -*- coding: utf-8 -*-

<%inherit file="root.html"/>

<!-- HEADER -->

<div id="header-dd"></div>

<div id="header">

    <div id="header-inner" class="title">

        <div id="logo">

            <h1><a href="${h.url('home')}">${c.rhodecode_name}</a></h1>

        </div>

        <!-- MENU -->

        ${self.page_nav()}

        <!-- END MENU -->

        ${self.body()}

    </div>

</div>

<!-- END HEADER -->

<!-- CONTENT -->

<div id="content">

    <div class="flash_msg">

        <% messages = h.flash.pop_messages() %>

        % if messages:

        <ul id="flash-messages">

            % for message in messages:

            <li class="${message.category}_msg">${message}</li>

            % endfor

        </ul>

        % endif

    </div>

    <div id="main">

        ${next.main()}

    </div>

</div>

<!-- END CONTENT -->

<!-- FOOTER -->

<div id="footer">

   <div id="footer-inner" class="title">

       <div>

           <p class="footer-link">

               ${_('Server instance: %s') % c.rhodecode_instanceid if c.rhodecode_instanceid else ''}

           </p>

           <p class="footer-link-right">

               <a href="${h.url('rhodecode_official')}">RhodeCode ${c.rhodecode_version}</a>

               © 2010-${h.datetime.today().year} by Marcin Kuzminski and others

               &ndash; <a href="${h.url('bugtracker')}">${_('Report a bug')}</a>

           </p>

       </div>

   </div>

</div>

<!-- END FOOTER -->

### MAKO DEFS ###

<%def name="breadcrumbs()">

    <div class="breadcrumbs">

    ${self.breadcrumbs_links()}

    </div>

</%def>

<%def name="context_bar(current)">

    ${repo_context_bar(current)}

</%def>

<%def name="admin_menu()">

  <ul class="admin_menu">

      <li>${h.link_to(_('Admin journal'),h.url('admin_home'),class_='journal ')}</li>

      <li>${h.link_to(_('Repositories'),h.url('repos'),class_='repos')}</li>

      <li>${h.link_to(_('Repository groups'),h.url('repos_groups'),class_='repos_groups')}</li>

      <li>${h.link_to(_('Users'),h.url('users'),class_='users')}</li>

      <li>${h.link_to(_('User groups'),h.url('users_groups'),class_='groups')}</li>

      <li>${h.link_to(_('Permissions'),h.url('edit_permission',id='default'),class_='permissions')}</li>

      <li>${h.link_to(_('LDAP'),h.url('ldap_home'),class_='ldap')}</li>

      <li>${h.link_to(_('Defaults'),h.url('defaults'),class_='defaults')}</li>

      <li class="last">${h.link_to(_('Settings'),h.url('admin_settings'),class_='settings')}</li>

  </ul>

</%def>

  <ul>

   %if repository_groups:

      <li>${h.link_to(_('Repository groups'),h.url('repos_groups'),class_='repos_groups')}</li>

   %if user_groups:

      <li>${h.link_to(_('User groups'),h.url('users_groups'),class_='groups')}</li>

   %endif

  </ul>

</%def>

<%def name="repo_context_bar(current=None)">

  <%

      def follow_class():

          if c.repository_following:

              return h.literal('following')

          else:

              return h.literal('follow')

  %>

  <%

    def is_current(selected):

        if selected == current:

            return h.literal('class="current"')

    %>

  <!--- CONTEXT BAR -->

  <div id="context-bar" class="box">

      <div id="breadcrumbs">

        ${h.link_to(_(u'Repositories'),h.url('home'))}

        »

        ${h.repo_link(c.rhodecode_db_repo.groups_and_repo)}

      </div>

      <ul id="context-pages" class="horizontal-list">

        <li ${is_current('summary')}><a href="${h.url('summary_home', repo_name=c.repo_name)}" class="summary">${_('Summary')}</a></li>

        <li ${is_current('changelog')}><a href="${h.url('changelog_home', repo_name=c.repo_name)}" class="changelogs">${_('Changelog')}</a></li>

        <li ${is_current('files')}><a href="${h.url('files_home', repo_name=c.repo_name)}" class="files"></span>${_('Files')}</a></li>

        <li ${is_current('switch-to')}>

          <a href="#" id="branch_tag_switcher_2" class="dropdown switch-to"></span>${_('Switch To')}</a>

          <ul id="switch_to_list_2" class="switch_to submenu">

            <li><a href="#">${_('loading...')}</a></li>

          </ul>

        </li>

        <li ${is_current('options')}>

          <a href="#" class="dropdown options"></span>${_('Options')}</a>

          <ul>

             %if h.HasRepoPermissionAll('repository.admin')(c.repo_name):

                   <li>${h.link_to(_('Settings'),h.url('edit_repo',repo_name=c.repo_name),class_='settings')}</li>

             %endif

              %if c.rhodecode_db_repo.fork:

               <li>${h.link_to(_('Compare fork'),h.url('compare_url',repo_name=c.rhodecode_db_repo.fork.repo_name,org_ref_type='branch',org_ref='default',other_repo=c.repo_name,other_ref_type='branch',other_ref=request.GET.get('branch') or 'default', merge=1),class_='compare_request')}</li>

              %endif

              <li>${h.link_to(_('Search'),h.url('search_repo',repo_name=c.repo_name),class_='search')}</li>

              %if h.HasRepoPermissionAny('repository.write','repository.admin')(c.repo_name) and c.rhodecode_db_repo.enable_locking:

                %if c.rhodecode_db_repo.locked[0]:

                  <li>${h.link_to(_('Unlock'), h.url('toggle_locking',repo_name=c.repo_name),class_='locking_del')}</li>

                %else:

                  <li>${h.link_to(_('Lock'), h.url('toggle_locking',repo_name=c.repo_name),class_='locking_add')}</li>

                %endif

              %endif

              ## TODO: this check feels wrong, it would be better to have a check for permissions

              ## also it feels like a job for the controller

              %if c.rhodecode_user.username != 'default':

                  <li>

                   <a class="${follow_class()}" onclick="javascript:toggleFollowingRepo(this,${c.rhodecode_db_repo.repo_id},'${str(h.get_token())}');">

                    <span class="show-follow">${_('Follow')}</span>

                    <span class="show-following">${_('Unfollow')}</span>

                  </a>

                  </li>

                  <li><a href="${h.url('repo_fork_home',repo_name=c.repo_name)}" class="fork">${_('Fork')}</a></li>

                  %if h.is_hg(c.rhodecode_repo):

                  <li><a href="${h.url('pullrequest_home',repo_name=c.repo_name)}" class="pull-request">${_('Create Pull Request')}</a></li>

                  %endif

              %endif

             </ul>

        </li>

        <li ${is_current('showpullrequest')}>

          <a href="${h.url('pullrequest_show_all',repo_name=c.repo_name)}" title="${_('Show Pull Requests')}" class="pull-request">${_('Pull Requests')}

            %if c.repository_pull_requests:

              <span>${c.repository_pull_requests}</span>

            %endif

          </a>

        </li>

      </ul>

  </div>

  <script type="text/javascript">

      YUE.on('branch_tag_switcher_2','mouseover',function(){

         var loaded = YUD.hasClass('branch_tag_switcher_2','loaded');

         if(!loaded){

             YUD.addClass('branch_tag_switcher_2','loaded');

             ypjax("${h.url('branch_tag_switcher',repo_name=c.repo_name)}",'switch_to_list_2',

                 function(o){},

                 function(o){YUD.removeClass('branch_tag_switcher_2','loaded');}

                 ,null);

         }

         return false;

      });

  </script>

  <!--- END CONTEXT BAR -->

</%def>

                        <div class="input">

                            ${h.password('password',class_='focus')}

                        </div>

                    </div>

                    <div class="buttons">

                        <div class="password_forgoten">${h.link_to(_('Forgot password ?'),h.url('reset_password'))}</div>

                        <div class="register">

                        %if h.HasPermissionAny('hg.admin', 'hg.register.auto_activate', 'hg.register.manual_activate')():

                         ${h.link_to(_("Don't have an account ?"),h.url('register'))}

                        %endif

                        </div>

                        <div class="submit">

                            ${h.submit('sign_in',_('Log In'),class_="ui-btn xsmall")}

                        </div>

                    </div>

                </div>

            </div>

            ${h.end_form()}

        %else:

            <div class="links_left">

                <div class="big_gravatar"><img alt="gravatar" src="${h.gravatar_url(c.rhodecode_user.email,48)}" /></div>

                <div class="full_name">${c.rhodecode_user.full_name_or_username}</div>

                <div class="email">${c.rhodecode_user.email}</div>

            </div>

            <div class="links_right">

            <ol class="links">

              <li><a href="${h.url('notifications')}">${_('Notifications')}: ${c.unread_notifications}</a></li>

              <li>${h.link_to(_(u'My account'),h.url('admin_settings_my_account'))}</li>

              <li class="logout">${h.link_to(_(u'Log Out'),h.url('logout_home'))}</li>

            </ol>

            </div>

        %endif

      </div>

  </div>

    </li>

</%def>

<%def name="menu(current=None)">

        <%

        def is_current(selected):

            if selected == current:

                return h.literal('class="current"')

        %>

        <ul id="quick" class="horizontal-list">

          <!-- repo switcher -->

          <li ${is_current('repositories')}>

              <a class="menu_link repo_switcher childs" id="repo_switcher" title="${_('Switch repository')}" href="${h.url('home')}">

              ${_('Repositories')}

              </a>

              <ul id="repo_switcher_list" class="repo_switcher">

                  <li>

                      <a href="#">${_('loading...')}</a>

                  </li>

              </ul>

          </li>

          ##ROOT MENU

          %if c.rhodecode_user.username != 'default':

            <li ${is_current('journal')}>

              <a class="menu_link journal" title="${_('Show recent activity')}"  href="${h.url('journal')}">

              ${_('Journal')}

              </a>

            </li>

          %else:

            <li ${is_current('journal')}>

              <a class="menu_link journal" title="${_('Public journal')}"  href="${h.url('public_journal')}">

              ${_('Public journal')}

              </a>

            </li>

          %endif

            <li ${is_current('gists')}>

              <a class="menu_link gists childs" title="${_('Show public gists')}"  href="${h.url('gists')}">

              ${_('Gists')}

              </a>

                <ul class="admin_menu">

                  <li>${h.link_to(_('Create new gist'),h.url('new_gist'),class_='gists-new ')}</li>

                  <li>${h.link_to(_('All public gists'),h.url('gists'),class_='gists ')}</li>

                  %if c.rhodecode_user.username != 'default':

                    <li>${h.link_to(_('My public gists'),h.url('gists', public=1),class_='gists')}</li>

                    <li>${h.link_to(_('My private gists'),h.url('gists', private=1),class_='gists-private ')}</li>

                  %endif

                </ul>

            </li>

          <li ${is_current('search')}>

              <a class="menu_link search" title="${_('Search in repositories')}"  href="${h.url('search')}">

              ${_('Search')}

              </a>

          </li>

          % if h.HasPermissionAll('hg.admin')('access admin main page'):

            <li ${is_current('admin')}>

              <a class="menu_link admin childs" title="${_('Admin')}" href="${h.url('admin_home')}">

                ${_('Admin')}

              </a>

              ${admin_menu()}

            </li>

          <li ${is_current('admin')}>

              <a class="menu_link admin childs" title="${_('Admin')}">

                ${_('Admin')}

              </a>

                                  c.rhodecode_user.user_groups_admin or h.HasPermissionAny('hg.usergroup.create.true')())}

          </li>

          % endif

          ${usermenu()}

<script type="text/javascript">

    YUE.on('repo_switcher','mouseover',function(){

      var target = 'q_filter_rs';

      var qfilter_activate = function(){

          var nodes = YUQ('ul#repo_switcher_list li a.repo_name');

          var func = function(node){

              return node.parentNode;

          }

          q_filter(target,nodes,func);

      }

      var loaded = YUD.hasClass('repo_switcher','loaded');

      if(!loaded){

         YUD.addClass('repo_switcher','loaded');

         ypjax("${h.url('repo_switcher')}",'repo_switcher_list',

             function(o){qfilter_activate();YUD.get(target).focus()},

             function(o){YUD.removeClass('repo_switcher','loaded');}

             ,null);

      }else{

         YUD.get(target).focus();

      }

      return false;

     });

     YUE.on('header-dd', 'click',function(e){

         YUD.addClass('header-inner', 'hover');

         YUD.addClass('content', 'hover');

     });

</script>

</%def>