#!python

"""Bootstrap setuptools installation

If you want to use setuptools in your package's setup.py, just include this

file in the same directory with it, and add this to the top of your setup.py::

    from ez_setup import use_setuptools

    use_setuptools()

If you want to require a specific version of setuptools, set a download

mirror, or use an alternate download directory, you can do so by supplying

the appropriate options to ``use_setuptools()``.

This file can also be run as a script to install or upgrade setuptools.

"""

import sys

DEFAULT_VERSION = "0.6c9"

DEFAULT_URL     = "http://pypi.python.org/packages/%s/s/setuptools/" % sys.version[:3]

md5_data = {

    'setuptools-0.6b1-py2.3.egg': '8822caf901250d848b996b7f25c6e6ca',

    'setuptools-0.6b1-py2.4.egg': 'b79a8a403e4502fbb85ee3f1941735cb',

    'setuptools-0.6b2-py2.3.egg': '5657759d8a6d8fc44070a9d07272d99b',

    'setuptools-0.6b2-py2.4.egg': '4996a8d169d2be661fa32a6e52e4f82a',

    'setuptools-0.6b3-py2.3.egg': 'bb31c0fc7399a63579975cad9f5a0618',

    'setuptools-0.6b3-py2.4.egg': '38a8c6b3d6ecd22247f179f7da669fac',

    'setuptools-0.6b4-py2.3.egg': '62045a24ed4e1ebc77fe039aa4e6f7e5',

    'setuptools-0.6b4-py2.4.egg': '4cb2a185d228dacffb2d17f103b3b1c4',

    'setuptools-0.6c1-py2.3.egg': 'b3f2b5539d65cb7f74ad79127f1a908c',

    'setuptools-0.6c1-py2.4.egg': 'b45adeda0667d2d2ffe14009364f2a4b',

    'setuptools-0.6c2-py2.3.egg': 'f0064bf6aa2b7d0f3ba0b43f20817c27',

    'setuptools-0.6c2-py2.4.egg': '616192eec35f47e8ea16cd6a122b7277',

    'setuptools-0.6c3-py2.3.egg': 'f181fa125dfe85a259c9cd6f1d7b78fa',

    'setuptools-0.6c3-py2.4.egg': 'e0ed74682c998bfb73bf803a50e7b71e',

    'setuptools-0.6c3-py2.5.egg': 'abef16fdd61955514841c7c6bd98965e',

    'setuptools-0.6c4-py2.3.egg': 'b0b9131acab32022bfac7f44c5d7971f',

    'setuptools-0.6c4-py2.4.egg': '2a1f9656d4fbf3c97bf946c0a124e6e2',

    'setuptools-0.6c4-py2.5.egg': '8f5a052e32cdb9c72bcf4b5526f28afc',

    'setuptools-0.6c5-py2.3.egg': 'ee9fd80965da04f2f3e6b3576e9d8167',

    'setuptools-0.6c5-py2.4.egg': 'afe2adf1c01701ee841761f5bcd8aa64',

    'setuptools-0.6c5-py2.5.egg': 'a8d3f61494ccaa8714dfed37bccd3d5d',

    'setuptools-0.6c6-py2.3.egg': '35686b78116a668847237b69d549ec20',

    'setuptools-0.6c6-py2.4.egg': '3c56af57be3225019260a644430065ab',

    'setuptools-0.6c6-py2.5.egg': 'b2f8a7520709a5b34f80946de5f02f53',

    'setuptools-0.6c7-py2.3.egg': '209fdf9adc3a615e5115b725658e13e2',

    'setuptools-0.6c7-py2.4.egg': '5a8f954807d46a0fb67cf1f26c55a82e',

    'setuptools-0.6c7-py2.5.egg': '45d2ad28f9750e7434111fde831e8372',

    'setuptools-0.6c8-py2.3.egg': '50759d29b349db8cfd807ba8303f1902',

    'setuptools-0.6c8-py2.4.egg': 'cba38d74f7d483c06e9daa6070cce6de',

    'setuptools-0.6c8-py2.5.egg': '1721747ee329dc150590a58b3e1ac95b',

    'setuptools-0.6c9-py2.3.egg': 'a83c4020414807b496e4cfbe08507c03',

    'setuptools-0.6c9-py2.4.egg': '260a2be2e5388d66bdaee06abec6342a',

    'setuptools-0.6c9-py2.5.egg': 'fe67c3e5a17b12c0e7c541b7ea43a8e6',

    'setuptools-0.6c9-py2.6.egg': 'ca37b1ff16fa2ede6e19383e7b59245a',

}

import sys, os

try: from hashlib import md5

except ImportError: from md5 import md5

def _validate_md5(egg_name, data):

    if egg_name in md5_data:

        digest = md5(data).hexdigest()

        if digest != md5_data[egg_name]:

            print >>sys.stderr, (

                "md5 validation of %s failed!  (Possible download problem?)"

                % egg_name

            )

            sys.exit(2)

    return data

def use_setuptools(

    version=DEFAULT_VERSION, download_base=DEFAULT_URL, to_dir=os.curdir,

    download_delay=15

):

    """Automatically find/download setuptools and make it available on sys.path

    `version` should be a valid setuptools version number that is available

    as an egg for download under the `download_base` URL (which should end with

    a '/').  `to_dir` is the directory where setuptools will be downloaded, if

    it is not already available.  If `download_delay` is specified, it should

    be the number of seconds that will be paused before initiating a download,

    should one be required.  If an older version of setuptools is installed,

    this routine will print a message to ``sys.stderr`` and raise SystemExit in

    an attempt to abort the calling script.

    """

    was_imported = 'pkg_resources' in sys.modules or 'setuptools' in sys.modules

    def do_download():

        egg = download_setuptools(version, download_base, to_dir, download_delay)

        sys.path.insert(0, egg)

        import setuptools; setuptools.bootstrap_install_from = egg

    try:

        import pkg_resources

    except ImportError:

    try:

        pkg_resources.require("setuptools>="+version); return

    except pkg_resources.VersionConflict, e:

        if was_imported:

            print >>sys.stderr, (

            "The required version of setuptools (>=%s) is not available, and\n"

            "can't be installed while this script is running. Please install\n"

            " a more recent version first, using 'easy_install -U setuptools'."

            "\n\n(Currently using %r)"

            ) % (version, e.args[0])

            sys.exit(2)

        else:

            del pkg_resources, sys.modules['pkg_resources']    # reload ok

            return do_download()

    except pkg_resources.DistributionNotFound:

        return do_download()

def download_setuptools(

    version=DEFAULT_VERSION, download_base=DEFAULT_URL, to_dir=os.curdir,

    delay = 15

):

    """Download setuptools from a specified location and return its filename

    `version` should be a valid setuptools version number that is available

    as an egg for download under the `download_base` URL (which should end

    with a '/'). `to_dir` is the directory where the egg will be downloaded.

    `delay` is the number of seconds to pause before an actual download attempt.

    """

    import urllib2, shutil

    egg_name = "setuptools-%s-py%s.egg" % (version,sys.version[:3])

    url = download_base + egg_name

    saveto = os.path.join(to_dir, egg_name)

    src = dst = None

    if not os.path.exists(saveto):  # Avoid repeated downloads

        try:

            from distutils import log

            if delay:

                log.warn("""

---------------------------------------------------------------------------

This script requires setuptools version %s to run (even to display

help).  I will attempt to download it for you (from

%s), but

you may need to enable firewall access for this script first.

I will start the download in %d seconds.

(Note: if this machine does not have network access, please obtain the file

   %s

and place it in this directory before rerunning this script.)

---------------------------------------------------------------------------""",

                    version, download_base, delay, url

                ); from time import sleep; sleep(delay)

            log.warn("Downloading %s", url)

            src = urllib2.urlopen(url)

            # Read/write all in one block, so we don't create a corrupt file

            # if the download is interrupted.

            data = _validate_md5(egg_name, src.read())

            dst = open(saveto,"wb"); dst.write(data)

        finally:

            if src: src.close()

            if dst: dst.close()

    return os.path.realpath(saveto)

def main(argv, version=DEFAULT_VERSION):

    """Install or upgrade setuptools and EasyInstall"""

    try:

        import setuptools

    except ImportError:

        egg = None

        try:

            egg = download_setuptools(version, delay=0)

            sys.path.insert(0,egg)

            from setuptools.command.easy_install import main

            return main(list(argv)+[egg])   # we're done here

        finally:

            if egg and os.path.exists(egg):

                os.unlink(egg)

    else:

        if setuptools.__version__ == '0.0.1':

            print >>sys.stderr, (

            "You have an obsolete version of setuptools installed.  Please\n"

            "remove it from your system entirely before rerunning this script."

            )

            sys.exit(2)

    req = "setuptools>="+version

    import pkg_resources

    try:

        pkg_resources.require(req)

    except pkg_resources.VersionConflict:

        try:

            from setuptools.command.easy_install import main

        except ImportError:

            from easy_install import main

        main(list(argv)+[download_setuptools(delay=0)])

        sys.exit(0) # try to force an exit

    else:

        if argv:

            from setuptools.command.easy_install import main

            main(argv)

        else:

            print "Setuptools version",version,"or greater has been installed."

            print '(Run "ez_setup.py -U setuptools" to reinstall or upgrade.)'

def update_md5(filenames):

    """Update our built-in md5 registry"""

    import re

    for name in filenames:

        base = os.path.basename(name)

        f = open(name,'rb')

        md5_data[base] = md5(f.read()).hexdigest()

        f.close()

    data = ["    %r: %r,\n" % it for it in md5_data.items()]

    data.sort()

    repl = "".join(data)

    import inspect

    srcfile = inspect.getsourcefile(sys.modules[__name__])

    f = open(srcfile, 'rb'); src = f.read(); f.close()

    match = re.search("\nmd5_data = {\n([^}]+)}", src)

    if not match:

        print >>sys.stderr, "Internal error!"

        sys.exit(2)

    src = src[:match.start(1)] + repl + src[match.end(1):]

    f = open(srcfile,'w')

    f.write(src)

    f.close()

if __name__=='__main__':

    if len(sys.argv)>2 and sys.argv[1]=='--md5update':

        update_md5(sys.argv[2:])

    else:

        main(sys.argv[1:])

# -*- coding: utf-8 -*-

"""

    rhodecode.__init__

    ~~~~~~~~~~~~~~~~~~

    RhodeCode, a web based repository management based on pylons

    versioning implementation: http://semver.org/

    :created_on: Apr 9, 2010

    :author: marcink

    :license: GPLv3, see COPYING for more details.

"""

# This program is free software; you can redistribute it and/or

# modify it under the terms of the GNU General Public License

# as published by the Free Software Foundation; version 2

# of the License or (at your opinion) any later version of the license.

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU General Public License for more details.

# You should have received a copy of the GNU General Public License

# along with this program; if not, write to the Free Software

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,

# MA  02110-1301, USA.

import platform

VERSION = (1, 2, 0, 'beta')

__version__ = '.'.join((str(each) for each in VERSION[:4]))

__dbversion__ = 3 #defines current db version for migrations

__platform__ = platform.system()

PLATFORM_WIN = ('Windows',)

PLATFORM_OTHERS = ('Linux', 'Darwin', 'FreeBSD',)

try:

    from rhodecode.lib.utils import get_current_revision

    _rev = get_current_revision()

except ImportError:

    #this is needed when doing some setup.py operations

    _rev = False

if len(VERSION) > 3 and _rev:

    __version__ += ' [rev:%s]' % _rev[0]

def get_version():

    """Returns shorter version (digit parts only) as string."""

    return '.'.join((str(each) for each in VERSION[:3]))

BACKENDS = {

    'hg': 'Mercurial repository',

    #'git': 'Git repository',

}

"""Pylons middleware initialization"""

from beaker.middleware import SessionMiddleware

from routes.middleware import RoutesMiddleware

from paste.cascade import Cascade

from paste.registry import RegistryManager

from paste.urlparser import StaticURLParser

from paste.deploy.converters import asbool

from paste.gzipper import make_gzip_middleware

from pylons.middleware import ErrorHandler, StatusCodeRedirect

from pylons.wsgiapp import PylonsApp

from rhodecode.lib.middleware.simplehg import SimpleHg

from rhodecode.lib.middleware.simplegit import SimpleGit

from rhodecode.lib.middleware.https_fixup import HttpsFixup

from rhodecode.config.environment import load_environment

def make_app(global_conf, full_stack=True, static_files=True, **app_conf):

    """Create a Pylons WSGI application and return it

    ``global_conf``

        The inherited configuration for this application. Normally from

        the [DEFAULT] section of the Paste ini file.

    ``full_stack``

        Whether or not this application provides a full WSGI stack (by

        default, meaning it handles its own exceptions and errors).

        Disable full_stack when this application is "managed" by

        another WSGI middleware.

    ``app_conf``

        The application's local configuration. Normally specified in

        the [app:<name>] section of the Paste ini file (where <name>

        defaults to main).

    """

    # Configure the Pylons environment

    config = load_environment(global_conf, app_conf)

    # The Pylons WSGI app

    app = PylonsApp(config=config)

    # Routing/Session/Cache Middleware

    app = RoutesMiddleware(app, config['routes.map'])

    app = SessionMiddleware(app, config)

    # CUSTOM MIDDLEWARE HERE (filtered by error handling middlewares)

    app = SimpleHg(app, config)

    app = SimpleGit(app, config)

    if asbool(full_stack):

        # Handle Python exceptions

        app = ErrorHandler(app, global_conf, **config['pylons.errorware'])

        # Display error documents for 401, 403, 404 status codes (and

        # 500 when debug is disabled)

        if asbool(config['debug']):

            app = StatusCodeRedirect(app)

        else:

            app = StatusCodeRedirect(app, [400, 401, 403, 404, 500])

    #enable https redirets based on HTTP_X_URL_SCHEME set by proxy

    app = HttpsFixup(app, config)

    # Establish the Registry for this application

    app = RegistryManager(app)

    if asbool(static_files):

        # Serve static files

        static_app = StaticURLParser(config['pylons.paths']['static_files'])

        app = Cascade([static_app, app])

        app = make_gzip_middleware(app, global_conf, compress_level=1)

    app.config = config

    return app

"""

Routes configuration

The more specific and detailed routes should be defined first so they

may take precedent over the more generic routes. For more information

refer to the routes manual at http://routes.groovie.org/docs/

"""

from __future__ import with_statement

from routes import Mapper

from rhodecode.lib.utils import check_repo_fast as cr

def make_map(config):

    """Create, configure and return the routes Mapper"""

    routes_map = Mapper(directory=config['pylons.paths']['controllers'],

                 always_scan=config['debug'])

    routes_map.minimization = False

    routes_map.explicit = False

    def check_repo(environ, match_dict):

        """

        check for valid repository for proper 404 handling

        :param environ:

        :param match_dict:

        """

        repo_name = match_dict.get('repo_name')

        return not cr(repo_name, config['base_path'])

    # The ErrorController route (handles 404/500 error pages); it should

    # likely stay at the top, ensuring it can always be resolved

    routes_map.connect('/error/{action}', controller='error')

    routes_map.connect('/error/{action}/{id}', controller='error')

    #==========================================================================

    # CUSTOM ROUTES HERE

    #==========================================================================

    #MAIN PAGE

    routes_map.connect('home', '/', controller='home', action='index')

    routes_map.connect('repo_switcher', '/repos', controller='home', action='repo_switcher')

    routes_map.connect('bugtracker', "http://bitbucket.org/marcinkuzminski/rhodecode/issues", _static=True)

    routes_map.connect('gpl_license', "http://www.gnu.org/licenses/gpl.html", _static=True)

    routes_map.connect('rhodecode_official', "http://rhodecode.org", _static=True)

    #ADMIN REPOSITORY REST ROUTES

    with routes_map.submapper(path_prefix='/_admin', controller='admin/repos') as m:

        m.connect("repos", "/repos",

             action="create", conditions=dict(method=["POST"]))

        m.connect("repos", "/repos",

             action="index", conditions=dict(method=["GET"]))

        m.connect("formatted_repos", "/repos.{format}",

             action="index",

            conditions=dict(method=["GET"]))

        m.connect("new_repo", "/repos/new",

             action="new", conditions=dict(method=["GET"]))

        m.connect("formatted_new_repo", "/repos/new.{format}",

             action="new", conditions=dict(method=["GET"]))

        m.connect("/repos/{repo_name:.*}",

             action="update", conditions=dict(method=["PUT"],

                                              function=check_repo))

        m.connect("/repos/{repo_name:.*}",

             action="delete", conditions=dict(method=["DELETE"],

                                              function=check_repo))

        m.connect("edit_repo", "/repos/{repo_name:.*}/edit",

             action="edit", conditions=dict(method=["GET"],

                                            function=check_repo))

        m.connect("formatted_edit_repo", "/repos/{repo_name:.*}.{format}/edit",

             action="edit", conditions=dict(method=["GET"],

                                            function=check_repo))

        m.connect("repo", "/repos/{repo_name:.*}",

             action="show", conditions=dict(method=["GET"],

                                            function=check_repo))

        m.connect("formatted_repo", "/repos/{repo_name:.*}.{format}",

             action="show", conditions=dict(method=["GET"],

                                            function=check_repo))

        #ajax delete repo perm user

        m.connect('delete_repo_user', "/repos_delete_user/{repo_name:.*}",

             action="delete_perm_user", conditions=dict(method=["DELETE"],

                                                        function=check_repo))

        #ajax delete repo perm users_group

        m.connect('delete_repo_users_group', "/repos_delete_users_group/{repo_name:.*}",

             action="delete_perm_users_group", conditions=dict(method=["DELETE"],

                                                        function=check_repo))

        #settings actions

        m.connect('repo_stats', "/repos_stats/{repo_name:.*}",

             action="repo_stats", conditions=dict(method=["DELETE"],

                                                        function=check_repo))

        m.connect('repo_cache', "/repos_cache/{repo_name:.*}",

             action="repo_cache", conditions=dict(method=["DELETE"],

                                                        function=check_repo))

        m.connect('repo_public_journal', "/repos_public_journal/{repo_name:.*}",

             action="repo_public_journal", conditions=dict(method=["PUT"],

                                                        function=check_repo))

        m.connect('repo_pull', "/repo_pull/{repo_name:.*}",

             action="repo_pull", conditions=dict(method=["PUT"],

                                                        function=check_repo))

    #ADMIN REPOS GROUP REST ROUTES

    routes_map.resource('repos_group', 'repos_groups', controller='admin/repos_groups', path_prefix='/_admin')

    #ADMIN USER REST ROUTES

    routes_map.resource('user', 'users', controller='admin/users', path_prefix='/_admin')

    #ADMIN USERS REST ROUTES

    routes_map.resource('users_group', 'users_groups', controller='admin/users_groups', path_prefix='/_admin')

    #ADMIN GROUP REST ROUTES

    routes_map.resource('group', 'groups', controller='admin/groups', path_prefix='/_admin')

    #ADMIN PERMISSIONS REST ROUTES

    routes_map.resource('permission', 'permissions', controller='admin/permissions', path_prefix='/_admin')

    ##ADMIN LDAP SETTINGS

    routes_map.connect('ldap_settings', '/_admin/ldap', controller='admin/ldap_settings',

                action='ldap_settings', conditions=dict(method=["POST"]))

    routes_map.connect('ldap_home', '/_admin/ldap', controller='admin/ldap_settings',)

# -*- coding: utf-8 -*-

"""

    rhodecode.controllers.admin.admin

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Controller for Admin panel of Rhodecode

    :created_on: Apr 7, 2010

    :author: marcink

    :license: GPLv3, see COPYING for more details.

"""

# This program is free software; you can redistribute it and/or

# modify it under the terms of the GNU General Public License

# as published by the Free Software Foundation; version 2

# of the License or (at your opinion) any later version of the license.

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU General Public License for more details.

# You should have received a copy of the GNU General Public License

# along with this program; if not, write to the Free Software

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,

# MA  02110-1301, USA.

import logging

from pylons import request, tmpl_context as c

from sqlalchemy.orm import joinedload

from webhelpers.paginate import Page

from rhodecode.lib.auth import LoginRequired, HasPermissionAllDecorator

from rhodecode.lib.base import BaseController, render

from rhodecode.model.db import UserLog

log = logging.getLogger(__name__)

class AdminController(BaseController):

    @LoginRequired()

    def __before__(self):

        super(AdminController, self).__before__()

    @HasPermissionAllDecorator('hg.admin')

    def index(self):

        users_log = self.sa.query(UserLog)\

                .options(joinedload(UserLog.user))\

                .options(joinedload(UserLog.repository))\

                .order_by(UserLog.action_date.desc())

        p = int(request.params.get('page', 1))

        c.users_log = Page(users_log, page=p, items_per_page=10)

        c.log_data = render('admin/admin_log.html')

        if request.params.get('partial'):

            return c.log_data

        return render('admin/admin.html')

# -*- coding: utf-8 -*-

"""

    rhodecode.controllers.admin.ldap_settings

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    ldap controller for RhodeCode

    :created_on: Nov 26, 2010

    :author: marcink

    :license: GPLv3, see COPYING for more details.

"""

# This program is free software; you can redistribute it and/or

# modify it under the terms of the GNU General Public License

# as published by the Free Software Foundation; version 2

# of the License or (at your opinion) any later version of the license.

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU General Public License for more details.

# You should have received a copy of the GNU General Public License

# along with this program; if not, write to the Free Software

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,

# MA  02110-1301, USA.

import logging

import formencode

import traceback

from formencode import htmlfill

from pylons import request, response, session, tmpl_context as c, url

from pylons.controllers.util import abort, redirect

from pylons.i18n.translation import _

from rhodecode.lib.base import BaseController, render

from rhodecode.lib import helpers as h

from rhodecode.lib.auth import LoginRequired, HasPermissionAllDecorator

from rhodecode.lib.auth_ldap import LdapImportError

from rhodecode.model.settings import SettingsModel

from rhodecode.model.forms import LdapSettingsForm

from sqlalchemy.exc import DatabaseError

log = logging.getLogger(__name__)

class LdapSettingsController(BaseController):

    search_scope_choices = [('BASE',     _('BASE'),),

                            ('ONELEVEL', _('ONELEVEL'),),

                            ('SUBTREE',  _('SUBTREE'),),

                            ]

    search_scope_default = 'SUBTREE'

    tls_reqcert_choices = [('NEVER',  _('NEVER'),),

                           ('ALLOW',  _('ALLOW'),),

                           ('TRY',    _('TRY'),),

                           ('DEMAND', _('DEMAND'),),

                           ('HARD',   _('HARD'),),

                           ]

    tls_reqcert_default = 'DEMAND'

    @LoginRequired()

    @HasPermissionAllDecorator('hg.admin')

    def __before__(self):

        c.admin_user = session.get('admin_user')

        c.admin_username = session.get('admin_username')

        c.search_scope_choices = self.search_scope_choices

        c.tls_reqcert_choices  = self.tls_reqcert_choices

        super(LdapSettingsController, self).__before__()

    def index(self):

        defaults = SettingsModel().get_ldap_settings()

        c.search_scope_cur = defaults.get('ldap_search_scope')

        c.tls_reqcert_cur  = defaults.get('ldap_tls_reqcert')

        return htmlfill.render(

                    render('admin/ldap/ldap.html'),

                    defaults=defaults,

                    encoding="UTF-8",

                    force_defaults=True,)

    def ldap_settings(self):

        """POST ldap create and store ldap settings"""

        settings_model = SettingsModel()

        _form = LdapSettingsForm([x[0] for x in self.tls_reqcert_choices],

                                 [x[0] for x in self.search_scope_choices])()

        try:

            form_result = _form.to_python(dict(request.POST))

            try:

                for k, v in form_result.items():

                    if k.startswith('ldap_'):

                        setting = settings_model.get(k)

                        setting.app_settings_value = v

                        self.sa.add(setting)

                self.sa.commit()

                h.flash(_('Ldap settings updated successfully'),

                    category='success')

            except (DatabaseError,):

                raise

        except LdapImportError:

            h.flash(_('Unable to activate ldap. The "python-ldap" library '

                      'is missing.'), category='warning')

        except formencode.Invalid, errors:

            c.search_scope_cur = self.search_scope_default

            c.tls_reqcert_cur  = self.search_scope_default

            return htmlfill.render(

                render('admin/ldap/ldap.html'),

                defaults=errors.value,

# -*- coding: utf-8 -*-

"""

    rhodecode.controllers.admin.permissions

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    permissions controller for Rhodecode

    :created_on: Apr 27, 2010

    :author: marcink

    :license: GPLv3, see COPYING for more details.

"""

# This program is free software; you can redistribute it and/or

# modify it under the terms of the GNU General Public License

# as published by the Free Software Foundation; version 2

# of the License or (at your opinion) any later version of the license.

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU General Public License for more details.

# You should have received a copy of the GNU General Public License

# along with this program; if not, write to the Free Software

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,

# MA  02110-1301, USA.

from formencode import htmlfill

from pylons import request, session, tmpl_context as c, url

from pylons.controllers.util import abort, redirect

from pylons.i18n.translation import _

from rhodecode.lib import helpers as h

from rhodecode.lib.auth import LoginRequired, HasPermissionAllDecorator

from rhodecode.lib.auth_ldap import LdapImportError

from rhodecode.lib.base import BaseController, render

from rhodecode.model.forms import LdapSettingsForm, DefaultPermissionsForm

from rhodecode.model.permission import PermissionModel

from rhodecode.model.settings import SettingsModel

from rhodecode.model.user import UserModel

import formencode

import logging

import traceback

log = logging.getLogger(__name__)

class PermissionsController(BaseController):

    """REST Controller styled on the Atom Publishing Protocol"""

    # To properly map this controller, ensure your config/routing.py

    # file has a resource setup:

    #     map.resource('permission', 'permissions')

    @LoginRequired()

    @HasPermissionAllDecorator('hg.admin')

    def __before__(self):

        c.admin_user = session.get('admin_user')

        c.admin_username = session.get('admin_username')

        super(PermissionsController, self).__before__()

        self.perms_choices = [('repository.none', _('None'),),

                              ('repository.read', _('Read'),),

                              ('repository.write', _('Write'),),

                              ('repository.admin', _('Admin'),)]

        self.register_choices = [

            ('hg.register.none',

                _('disabled')),

            ('hg.register.manual_activate',

                _('allowed with manual account activation')),

            ('hg.register.auto_activate',

                _('allowed with automatic account activation')), ]

        self.create_choices = [('hg.create.none', _('Disabled')),

                               ('hg.create.repository', _('Enabled'))]

    def index(self, format='html'):

        """GET /permissions: All items in the collection"""

        # url('permissions')

    def create(self):

        """POST /permissions: Create a new item"""

        # url('permissions')

    def new(self, format='html'):

        """GET /permissions/new: Form to create a new item"""

        # url('new_permission')

    def update(self, id):

        """PUT /permissions/id: Update an existing item"""

        # Forms posted to this method should contain a hidden field:

        #    <input type="hidden" name="_method" value="PUT" />

        # Or using helpers:

        #    h.form(url('permission', id=ID),

        #           method='put')

        # url('permission', id=ID)

        permission_model = PermissionModel()