# -*- coding: utf-8 -*-

"""

    rhodecode.controllers.admin.users_groups

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    User Groups crud controller for pylons

    :created_on: Jan 25, 2011

    :author: marcink

    :copyright: (C) 2010-2012 Marcin Kuzminski <marcin@python-works.com>

    :license: GPLv3, see COPYING for more details.

"""

# This program is free software: you can redistribute it and/or modify

# it under the terms of the GNU General Public License as published by

# the Free Software Foundation, either version 3 of the License, or

# (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU General Public License for more details.

#

# You should have received a copy of the GNU General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import logging

import traceback

import formencode

from formencode import htmlfill

from pylons import request, session, tmpl_context as c, url, config

from pylons.controllers.util import abort, redirect

from pylons.i18n.translation import _

from rhodecode.lib import helpers as h

from rhodecode.lib.exceptions import UserGroupsAssignedException,\

    RepoGroupAssignmentError

from rhodecode.lib.utils2 import safe_unicode, str2bool, safe_int

from rhodecode.lib.auth import LoginRequired, HasPermissionAllDecorator,\

    HasUserGroupPermissionAnyDecorator, HasPermissionAnyDecorator

from rhodecode.lib.base import BaseController, render

from rhodecode.model.scm import UserGroupList

from rhodecode.model.users_group import UserGroupModel

from rhodecode.model.repo import RepoModel

from rhodecode.model.db import User, UserGroup, UserGroupToPerm,\

    UserGroupRepoToPerm, UserGroupRepoGroupToPerm

from rhodecode.model.forms import UserGroupForm, UserGroupPermsForm,\

    CustomDefaultPermissionsForm

from rhodecode.model.meta import Session

from rhodecode.lib.utils import action_logger

from sqlalchemy.orm import joinedload

from webob.exc import HTTPInternalServerError

log = logging.getLogger(__name__)

class UsersGroupsController(BaseController):

    """REST Controller styled on the Atom Publishing Protocol"""

    # To properly map this controller, ensure your config/routing.py

    # file has a resource setup:

    #     map.resource('users_group', 'users_groups')

    @LoginRequired()

    def __before__(self):

        super(UsersGroupsController, self).__before__()

        c.available_permissions = config['available_permissions']

    def __load_data(self, user_group_id):

        ugroup_repo_perms = UserGroupRepoToPerm.query()\

            .options(joinedload(UserGroupRepoToPerm.permission))\

            .options(joinedload(UserGroupRepoToPerm.repository))\

            .filter(UserGroupRepoToPerm.users_group_id == user_group_id)\

            .all()

        for gr in ugroup_repo_perms:

                = gr.permission.permission_name

        ugroup_group_perms = UserGroupRepoGroupToPerm.query()\

            .options(joinedload(UserGroupRepoGroupToPerm.permission))\

            .options(joinedload(UserGroupRepoGroupToPerm.group))\

            .filter(UserGroupRepoGroupToPerm.users_group_id == user_group_id)\

            .all()

        for gr in ugroup_group_perms:

                = gr.permission.permission_name

        c.group_members_obj = sorted((x.user for x in c.users_group.members),

                                     key=lambda u: u.username.lower())

        c.group_members = [(x.user_id, x.username) for x in c.group_members_obj]

        c.available_members = sorted(((x.user_id, x.username) for x in

                                      User.query().all()),

                                     key=lambda u: u[1].lower())

        repo_model = RepoModel()

        c.users_array = repo_model.get_users_js()

        c.users_groups_array = repo_model.get_users_groups_js()

        c.available_permissions = config['available_permissions']

    def __load_defaults(self, user_group_id):

        """

        Load defaults settings for edit, and update

        :param user_group_id:

        """

        user_group = UserGroup.get_or_404(user_group_id)

        data = user_group.get_dict()

        ug_model = UserGroupModel()

        data.update({

            'create_repo_perm': ug_model.has_perm(user_group,

                                                  'hg.create.repository'),

            'create_user_group_perm': ug_model.has_perm(user_group,

                                                  'hg.usergroup.create.true'),

            'fork_repo_perm': ug_model.has_perm(user_group,

                                                'hg.fork.repository'),

        })

        # fill user group users

        for p in user_group.user_user_group_to_perm:

            data.update({'u_perm_%s' % p.user.username:

                             p.permission.permission_name})

        for p in user_group.user_group_user_group_to_perm:

            data.update({'g_perm_%s' % p.user_group.users_group_name:

                             p.permission.permission_name})

        return data

    def index(self, format='html'):

        """GET /users_groups: All items in the collection"""

        # url('users_groups')

        group_iter = UserGroupList(UserGroup().query().all(),

                                   perm_set=['usergroup.admin'])

        sk = lambda g: g.users_group_name

        c.users_groups_list = sorted(group_iter, key=sk)

        return render('admin/users_groups/users_groups.html')

    @HasPermissionAnyDecorator('hg.admin', 'hg.usergroup.create.true')

    def create(self):

        """POST /users_groups: Create a new item"""

        # url('users_groups')

        users_group_form = UserGroupForm()()

        try:

            form_result = users_group_form.to_python(dict(request.POST))

            UserGroupModel().create(name=form_result['users_group_name'],

                                    owner=self.rhodecode_user.user_id,

                                    active=form_result['users_group_active'])

            gr = form_result['users_group_name']

            action_logger(self.rhodecode_user,

                          'admin_created_users_group:%s' % gr,

                          None, self.ip_addr, self.sa)

            h.flash(_('Created user group %s') % gr, category='success')

            Session().commit()

        except formencode.Invalid, errors:

            return htmlfill.render(

                render('admin/users_groups/users_group_add.html'),

                defaults=errors.value,

                errors=errors.error_dict or {},

                prefix_error=False,

                encoding="UTF-8")

        except Exception:

            log.error(traceback.format_exc())

            h.flash(_('Error occurred during creation of user group %s') \

                    % request.POST.get('users_group_name'), category='error')

        return redirect(url('users_groups'))

    @HasPermissionAnyDecorator('hg.admin', 'hg.usergroup.create.true')

    def new(self, format='html'):

        """GET /users_groups/new: Form to create a new item"""

        # url('new_users_group')

        return render('admin/users_groups/users_group_add.html')

    @HasUserGroupPermissionAnyDecorator('usergroup.admin')

    def update(self, id):

        """PUT /users_groups/id: Update an existing item"""

        # Forms posted to this method should contain a hidden field:

        #    <input type="hidden" name="_method" value="PUT" />

        # Or using helpers:

        #    h.form(url('users_group', id=ID),

        #           method='put')

        # url('users_group', id=ID)

        c.users_group = UserGroup.get_or_404(id)

        self.__load_data(id)

        available_members = [safe_unicode(x[0]) for x in c.available_members]

        users_group_form = UserGroupForm(edit=True,

                                          old_data=c.users_group.get_dict(),

                                          available_members=available_members)()

        try:

            form_result = users_group_form.to_python(request.POST)

            UserGroupModel().update(c.users_group, form_result)

            gr = form_result['users_group_name']

            action_logger(self.rhodecode_user,

                          'admin_updated_users_group:%s' % gr,

                          None, self.ip_addr, self.sa)

            h.flash(_('Updated user group %s') % gr, category='success')

            Session().commit()

        except formencode.Invalid, errors:

            ug_model = UserGroupModel()

            defaults = errors.value

            e = errors.error_dict or {}

            defaults.update({

                'create_repo_perm': ug_model.has_perm(id,

                                                      'hg.create.repository'),

                'fork_repo_perm': ug_model.has_perm(id,

                                                    'hg.fork.repository'),

                '_method': 'put'

            })

            return htmlfill.render(

                render('admin/users_groups/users_group_edit.html'),

                defaults=defaults,

                errors=e,

                prefix_error=False,

                encoding="UTF-8")

        except Exception:

            log.error(traceback.format_exc())

            h.flash(_('Error occurred during update of user group %s') \

                    % request.POST.get('users_group_name'), category='error')

        return redirect(url('edit_users_group', id=id))

    @HasUserGroupPermissionAnyDecorator('usergroup.admin')

    def delete(self, id):

        """DELETE /users_groups/id: Delete an existing item"""

        # Forms posted to this method should contain a hidden field:

        #    <input type="hidden" name="_method" value="DELETE" />

        # Or using helpers:

        #    h.form(url('users_group', id=ID),

        #           method='delete')

        # url('users_group', id=ID)

        usr_gr = UserGroup.get_or_404(id)

        try:

            UserGroupModel().delete(usr_gr)

            Session().commit()

            h.flash(_('Successfully deleted user group'), category='success')

        except UserGroupsAssignedException, e:

            h.flash(e, category='error')

        except Exception:

            log.error(traceback.format_exc())

            h.flash(_('An error occurred during deletion of user group'),

                    category='error')

        return redirect(url('users_groups'))

    @HasUserGroupPermissionAnyDecorator('usergroup.admin')

    def set_user_group_perm_member(self, id):

        """

        grant permission for given usergroup

        :param id:

        """

        user_group = UserGroup.get_or_404(id)

        form = UserGroupPermsForm()().to_python(request.POST)

        # set the permissions !

        try:

            UserGroupModel()._update_permissions(user_group, form['perms_new'],

                                                 form['perms_updates'])

        except RepoGroupAssignmentError:

            h.flash(_('Target group cannot be the same'), category='error')

            return redirect(url('edit_users_group', id=id))

        #TODO: implement this

        #action_logger(self.rhodecode_user, 'admin_changed_repo_permissions',

        #              repo_name, self.ip_addr, self.sa)

        Session().commit()

        h.flash(_('User Group permissions updated'), category='success')

        return redirect(url('edit_users_group', id=id))

    @HasUserGroupPermissionAnyDecorator('usergroup.admin')

    def delete_user_group_perm_member(self, id):

## -*- coding: utf-8 -*-

<%inherit file="/base/base.html"/>

<%def name="title()">

    ${_('Edit user group')} ${c.users_group.users_group_name} · ${c.rhodecode_name}

</%def>

<%def name="breadcrumbs_links()">

    ${h.link_to(_('Admin'),h.url('admin_home'))}

    »

    ${h.link_to(_('UserGroups'),h.url('users_groups'))}

    »

    ${_('Edit %s') % c.users_group.users_group_name}

</%def>

<%def name="page_nav()">

    ${self.menu('admin')}

</%def>

<%def name="main()">

<div class="box box-left" style="clear:left">

    <!-- box / title -->

    <div class="title">

        ${self.breadcrumbs()}

    </div>

    <!-- end box / title -->

    ${h.form(url('users_group', id=c.users_group.users_group_id),method='put', id='edit_users_group')}

    <div class="form">

        <!-- fields -->

            <div class="fields">

                 <div class="field">

                    <div class="label">

                        <label for="users_group_name">${_('Group name')}:</label>

                    </div>

                    <div class="input">

                        ${h.text('users_group_name',class_='small')}

                    </div>

                 </div>

                 <div class="field">

                    <div class="label label-checkbox">

                        <label for="users_group_active">${_('Active')}:</label>

                    </div>

                    <div class="checkboxes">

                        ${h.checkbox('users_group_active',value=True)}

                    </div>

                 </div>

                <div class="field">

                    <div class="label">

                        <label for="users_group_active">${_('Members')}:</label>

                    </div>

                    <div class="select">

                        <table>

                                <tr>

                                    <td>

                                        <div>

                                            <div style="float:left">

                                                <div class="text" style="padding: 0px 0px 6px;">${_('Chosen group members')}</div>

                                                ${h.select('users_group_members',[x[0] for x in c.group_members],c.group_members,multiple=True,size=8,style="min-width:210px")}

                                               <div id="remove_all_elements" style="cursor:pointer;text-align:center">

                                                   ${_('Remove all elements')}

                                                   <img alt="remove" style="vertical-align:text-bottom" src="${h.url('/images/icons/arrow_right.png')}"/>

                                               </div>

                                            </div>

                                            <div style="float:left;width:20px;padding-top:50px">

                                                <img alt="add" id="add_element"

                                                    style="padding:2px;cursor:pointer"

                                                    src="${h.url('/images/icons/arrow_left.png')}"/>

                                                <br />

                                                <img alt="remove" id="remove_element"

                                                    style="padding:2px;cursor:pointer"

                                                    src="${h.url('/images/icons/arrow_right.png')}"/>

                                            </div>

                                            <div style="float:left">

                                                 <div class="text" style="padding: 0px 0px 6px;">${_('Available members')}</div>

                                                 ${h.select('available_members',[],c.available_members,multiple=True,size=8,style="min-width:210px")}

                                                 <div id="add_all_elements" style="cursor:pointer;text-align:center">

                                                       <img alt="add" style="vertical-align:text-bottom" src="${h.url('/images/icons/arrow_left.png')}"/>

                                                        ${_('Add all elements')}

                                                 </div>

                                            </div>

                                        </div>

                                    </td>

                                </tr>

                        </table>

                    </div>

                </div>

                <div class="buttons">

                  ${h.submit('Save',_('Save'),class_="ui-btn large")}

                </div>

            </div>

    </div>

${h.end_form()}

    <div class="group_members_wrap">

    % if c.group_members_obj:

      <ul class="group_members">

      %for user in c.group_members_obj:

        <li>

          <div class="group_member">

            <div class="gravatar"><img alt="gravatar" src="${h.gravatar_url(user.email,24)}"/> </div>

            <div>${h.link_to(user.username, h.url('edit_user',id=user.user_id))}</div>

            <div>${user.full_name}</div>

          </div>

        </li>

      %endfor

      </ul>

      %else:

        <span class="empty_data">${_('No members yet')}</span>

      %endif

    </div>

</div>

<div class="box box-right">

    <!-- box / title -->

    <div class="title">

        <h5>${_('Global Permissions')}</h5>

    </div>

    <%namespace name="dpb" file="/base/default_perms_box.html"/>

    ${dpb.default_perms_box(url('users_group_perm', id=c.users_group.users_group_id))}

</div>

    <div class="title">

        <h5>${_('Permissions')}</h5>

    </div>

    ${h.form(url('set_user_group_perm_member', id=c.users_group.users_group_id),method='post')}

    <div class="form">

       <div class="fields">

            <div class="field">

                <div class="label">

                    <label for="input">${_('Permissions')}:</label>

                </div>

                <div class="input">

                    <%include file="user_group_edit_perms.html"/>

                </div>

            </div>

            <div class="buttons">

              ${h.submit('save',_('Save'),class_="ui-btn large")}

              ${h.reset('reset',_('Reset'),class_="ui-btn large")}

            </div>

       </div>

    </div>

    ${h.end_form()}

</div>

<script type="text/javascript">

  MultiSelectWidget('users_group_members','available_members','edit_users_group');

</script>

</%def>