|
|
@@ -0,0 +1,374 @@
|
|
|
+from django.core.urlresolvers import reverse as django_reverse
|
|
|
+from django.db.models import Q
|
|
|
+from django.shortcuts import redirect
|
|
|
+from django.utils.translation import ugettext as _
|
|
|
+from misago.admin import site
|
|
|
+from misago.apps.admin.widgets import *
|
|
|
+from misago.markdown import signature_markdown
|
|
|
+from misago.models import Forum, User
|
|
|
+from misago.utils.strings import random_string
|
|
|
+from misago.apps.admin.users.forms import UserForm, NewUserForm, SearchUsersForm
|
|
|
+
|
|
|
+def reverse(route, target=None):
|
|
|
+ if target:
|
|
|
+ return django_reverse(route, kwargs={'target': target.pk, 'slug': target.username_slug})
|
|
|
+ return django_reverse(route)
|
|
|
+
|
|
|
+
|
|
|
+"""
|
|
|
+Views
|
|
|
+"""
|
|
|
+class List(ListWidget):
|
|
|
+ admin = site.get_action('users')
|
|
|
+ id = 'list'
|
|
|
+ columns = (
|
|
|
+ ('username_slug', _("User Name"), 35),
|
|
|
+ ('join_date', _("Join Date")),
|
|
|
+ )
|
|
|
+ default_sorting = 'username'
|
|
|
+ sortables = {
|
|
|
+ 'username_slug': 1,
|
|
|
+ 'join_date': 0,
|
|
|
+ }
|
|
|
+ pagination = 25
|
|
|
+ search_form = SearchUsersForm
|
|
|
+ nothing_checked_message = _('You have to check at least one user.')
|
|
|
+ actions = (
|
|
|
+ ('activate', _("Activate users"), _("Are you sure you want to activate selected members?")),
|
|
|
+ ('deactivate', _("Request e-mail validation"), _("Are you sure you want to deactivate selected members and request them to revalidate their e-mail addresses?")),
|
|
|
+ ('remove_av', _("Remove and lock avatars"), _("Are you sure you want to remove selected members avatars and their ability to change them?")),
|
|
|
+ ('remove_sig', _("Remove and lock signatures"), _("Are you sure you want to remove selected members signatures and their ability to edit them?")),
|
|
|
+ ('remove_locks', _("Remove locks from avatars and signatures"), _("Are you sure you want to remove locks from selected members avatars and signatures?")),
|
|
|
+ ('reset', _("Reset passwords"), _("Are you sure you want to reset selected members passwords?")),
|
|
|
+ ('delete_content', _("Delete users with content"), _("Are you sure you want to delete selected users and their content?")),
|
|
|
+ ('delete', _("Delete users"), _("Are you sure you want to delete selected users?")),
|
|
|
+ )
|
|
|
+
|
|
|
+ def set_filters(self, model, filters):
|
|
|
+ if 'role' in filters:
|
|
|
+ model = model.filter(roles__in=filters['role']).distinct()
|
|
|
+ if 'rank' in filters:
|
|
|
+ model = model.filter(rank__in=filters['rank'])
|
|
|
+ if 'username' in filters:
|
|
|
+ if ',' in filters['username']:
|
|
|
+ qs = None
|
|
|
+ for name in filters['username'].split(','):
|
|
|
+ name = name.strip().lower()
|
|
|
+ if name:
|
|
|
+ if qs:
|
|
|
+ qs = qs | Q(username_slug__contains=name)
|
|
|
+ else:
|
|
|
+ qs = Q(username_slug__contains=name)
|
|
|
+ if qs:
|
|
|
+ model = model.filter(qs)
|
|
|
+ else:
|
|
|
+ model = model.filter(username_slug__contains=filters['username'])
|
|
|
+ if 'email' in filters:
|
|
|
+ if ',' in filters['email']:
|
|
|
+ qs = None
|
|
|
+ for name in filters['email'].split(','):
|
|
|
+ name = name.strip().lower()
|
|
|
+ if name:
|
|
|
+ if qs:
|
|
|
+ qs = qs | Q(email__contains=name)
|
|
|
+ else:
|
|
|
+ qs = Q(email__contains=name)
|
|
|
+ if qs:
|
|
|
+ model = model.filter(qs)
|
|
|
+ else:
|
|
|
+ model = model.filter(email__contains=filters['email'])
|
|
|
+ if 'activation' in filters:
|
|
|
+ model = model.filter(activation__in=filters['activation'])
|
|
|
+ return model
|
|
|
+
|
|
|
+ def prefetch_related(self, items):
|
|
|
+ return items.prefetch_related('roles')
|
|
|
+
|
|
|
+ def get_item_actions(self, item):
|
|
|
+ return (
|
|
|
+ self.action('pencil', _("Edit User Details"), reverse('admin_users_edit', item)),
|
|
|
+ self.action('remove', _("Delete User"), reverse('admin_users_delete', item), post=True, prompt=_("Are you sure you want to delete this user account?")),
|
|
|
+ )
|
|
|
+
|
|
|
+ def action_activate(self, items, checked):
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked and user.activation > 0:
|
|
|
+ self.request.monitor['users_inactive'] = int(self.request.monitor['users_inactive']) - 1
|
|
|
+ user.activation = user.ACTIVATION_NONE
|
|
|
+ user.save(force_update=True)
|
|
|
+ user.email_user(
|
|
|
+ self.request,
|
|
|
+ 'users/activation/admin_done',
|
|
|
+ _("Your Account has been activated"),
|
|
|
+ )
|
|
|
+
|
|
|
+ return Message(_('Selected users accounts have been activated.'), 'success'), reverse('admin_users')
|
|
|
+
|
|
|
+ def action_deactivate(self, items, checked):
|
|
|
+ # First loop - check for errors
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ if user.is_protected() and not self.request.user.is_god():
|
|
|
+ return Message(_('You cannot force validation of protected members e-mails.'), 'error'), reverse('admin_users')
|
|
|
+
|
|
|
+ # Second loop - reset passwords
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ user.activation = user.ACTIVATION_USER
|
|
|
+ user.token = token = random_string(12)
|
|
|
+ user.save(force_update=True)
|
|
|
+ user.email_user(
|
|
|
+ self.request,
|
|
|
+ 'users/activation/invalidated',
|
|
|
+ _("Account Activation"),
|
|
|
+ )
|
|
|
+
|
|
|
+ return Message(_('Selected users accounts have been deactivated and new activation links have been sent to them.'), 'success'), reverse('admin_users')
|
|
|
+
|
|
|
+ def action_remove_av(self, items, checked):
|
|
|
+ # First loop - check for errors
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ if user.is_protected() and not self.request.user.is_god():
|
|
|
+ return Message(_('You cannot remove and block protected members avatars.'), 'error'), reverse('admin_users')
|
|
|
+
|
|
|
+ # Second loop - reset passwords
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ user.lock_avatar()
|
|
|
+ user.save(force_update=True)
|
|
|
+
|
|
|
+ return Message(_('Selected users avatars were deleted and locked.'), 'success'), reverse('admin_users')
|
|
|
+
|
|
|
+ def action_remove_sig(self, items, checked):
|
|
|
+ # First loop - check for errors
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ if user.is_protected() and not self.request.user.is_god():
|
|
|
+ return Message(_('You cannot remove and block protected members signatures.'), 'error'), reverse('admin_users')
|
|
|
+
|
|
|
+ # Second loop - reset passwords
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ user.signature_ban = True
|
|
|
+ user.signature = ''
|
|
|
+ user.signature_preparsed = ''
|
|
|
+ user.save(force_update=True)
|
|
|
+
|
|
|
+ return Message(_('Selected users signatures were deleted and locked.'), 'success'), reverse('admin_users')
|
|
|
+
|
|
|
+ def action_remove_locks(self, items, checked):
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ user.default_avatar(self.request.settings)
|
|
|
+ user.avatar_ban = False
|
|
|
+ user.signature_ban = False
|
|
|
+ user.save(force_update=True)
|
|
|
+
|
|
|
+ return Message(_('Selected users can now edit their avatars and signatures.'), 'success'), reverse('admin_users')
|
|
|
+
|
|
|
+ def action_reset(self, items, checked):
|
|
|
+ # First loop - check for errors
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ if user.is_protected() and not self.request.user.is_god():
|
|
|
+ return Message(_('You cannot reset protected members passwords.'), 'error'), reverse('admin_users')
|
|
|
+
|
|
|
+ # Second loop - reset passwords
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ new_password = random_string(8)
|
|
|
+ user.set_password(new_password)
|
|
|
+ user.save(force_update=True)
|
|
|
+ user.email_user(
|
|
|
+ self.request,
|
|
|
+ 'users/password/new_admin',
|
|
|
+ _("Your New Password"),
|
|
|
+ {
|
|
|
+ 'password': new_password,
|
|
|
+ },
|
|
|
+ )
|
|
|
+
|
|
|
+ return Message(_('Selected users passwords have been reset successfully.'), 'success'), reverse('admin_users')
|
|
|
+
|
|
|
+ def action_delete_content(self, items, checked):
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ if user.pk == self.request.user.id:
|
|
|
+ return Message(_('You cannot delete yourself.'), 'error'), reverse('admin_users')
|
|
|
+ if user.is_protected():
|
|
|
+ return Message(_('You cannot delete protected members.'), 'error'), reverse('admin_users')
|
|
|
+
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ user.delete_content()
|
|
|
+ user.delete()
|
|
|
+
|
|
|
+ for forum in Forum.objects.all():
|
|
|
+ forum.sync()
|
|
|
+ forum.save(force_update=True)
|
|
|
+
|
|
|
+ User.objects.resync_monitor(self.request.monitor)
|
|
|
+ return Message(_('Selected users and their content have been deleted successfully.'), 'success'), reverse('admin_users')
|
|
|
+
|
|
|
+ def action_delete(self, items, checked):
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ if user.pk == self.request.user.id:
|
|
|
+ return Message(_('You cannot delete yourself.'), 'error'), reverse('admin_users')
|
|
|
+ if user.is_protected():
|
|
|
+ return Message(_('You cannot delete protected members.'), 'error'), reverse('admin_users')
|
|
|
+
|
|
|
+ for user in items:
|
|
|
+ if unicode(user.pk) in checked:
|
|
|
+ user.delete()
|
|
|
+
|
|
|
+ User.objects.resync_monitor(self.request.monitor)
|
|
|
+ return Message(_('Selected users have been deleted successfully.'), 'success'), reverse('admin_users')
|
|
|
+
|
|
|
+
|
|
|
+class New(FormWidget):
|
|
|
+ admin = site.get_action('users')
|
|
|
+ id = 'new'
|
|
|
+ fallback = 'admin_users'
|
|
|
+ form = NewUserForm
|
|
|
+ submit_button = _("Save User")
|
|
|
+
|
|
|
+ def get_new_url(self, model):
|
|
|
+ return reverse('admin_users_new')
|
|
|
+
|
|
|
+ def get_edit_url(self, model):
|
|
|
+ return reverse('admin_users_edit', model)
|
|
|
+
|
|
|
+ def submit_form(self, form, target):
|
|
|
+ new_user = User.objects.create_user(
|
|
|
+ form.cleaned_data['username'],
|
|
|
+ form.cleaned_data['email'],
|
|
|
+ form.cleaned_data['password'],
|
|
|
+ self.request.settings['default_timezone'],
|
|
|
+ self.request.META['REMOTE_ADDR'],
|
|
|
+ no_roles=True,
|
|
|
+ request=self.request,
|
|
|
+ )
|
|
|
+ new_user.title = form.cleaned_data['title']
|
|
|
+ new_user.rank = form.cleaned_data['rank']
|
|
|
+
|
|
|
+ for role in form.cleaned_data['roles']:
|
|
|
+ new_user.roles.add(role)
|
|
|
+ new_user.make_acl_key(True)
|
|
|
+ new_user.save(force_update=True)
|
|
|
+
|
|
|
+ return new_user, Message(_('New User has been created.'), 'success')
|
|
|
+
|
|
|
+
|
|
|
+class Edit(FormWidget):
|
|
|
+ admin = site.get_action('users')
|
|
|
+ id = 'edit'
|
|
|
+ name = _("Edit User")
|
|
|
+ fallback = 'admin_users'
|
|
|
+ form = UserForm
|
|
|
+ tabbed = True
|
|
|
+ target_name = 'username'
|
|
|
+ notfound_message = _('Requested User could not be found.')
|
|
|
+ submit_fallback = True
|
|
|
+
|
|
|
+ def get_form_instance(self, form, model, initial, post=False):
|
|
|
+ if post:
|
|
|
+ return form(model, self.request.POST, request=self.request, initial=self.get_initial_data(model))
|
|
|
+ return form(model, request=self.request, initial=self.get_initial_data(model))
|
|
|
+
|
|
|
+ def get_url(self, model):
|
|
|
+ return reverse('admin_users_edit', model)
|
|
|
+
|
|
|
+ def get_edit_url(self, model):
|
|
|
+ return self.get_url(model)
|
|
|
+
|
|
|
+ def get_initial_data(self, model):
|
|
|
+ return {
|
|
|
+ 'username': model.username,
|
|
|
+ 'title': model.title,
|
|
|
+ 'email': model.email,
|
|
|
+ 'rank': model.rank,
|
|
|
+ 'roles': model.roles.all(),
|
|
|
+ 'avatar_ban': model.avatar_ban,
|
|
|
+ 'avatar_ban_reason_user': model.avatar_ban_reason_user,
|
|
|
+ 'avatar_ban_reason_admin': model.avatar_ban_reason_admin,
|
|
|
+ 'signature': model.signature,
|
|
|
+ 'signature_ban': model.signature_ban,
|
|
|
+ 'signature_ban_reason_user': model.signature_ban_reason_user,
|
|
|
+ 'signature_ban_reason_admin': model.signature_ban_reason_admin,
|
|
|
+ }
|
|
|
+
|
|
|
+ def submit_form(self, form, target):
|
|
|
+ target.title = form.cleaned_data['title']
|
|
|
+ target.rank = form.cleaned_data['rank']
|
|
|
+ target.avatar_ban_reason_user = form.cleaned_data['avatar_ban_reason_user']
|
|
|
+ target.avatar_ban_reason_admin = form.cleaned_data['avatar_ban_reason_admin']
|
|
|
+ target.signature_ban = form.cleaned_data['signature_ban']
|
|
|
+ target.signature_ban_reason_user = form.cleaned_data['signature_ban_reason_user']
|
|
|
+ target.signature_ban_reason_admin = form.cleaned_data['signature_ban_reason_admin']
|
|
|
+
|
|
|
+ # Sync username?
|
|
|
+ if target.username != self.original_name:
|
|
|
+ target.sync_username()
|
|
|
+
|
|
|
+ # Do signature mumbo-jumbo
|
|
|
+ if form.cleaned_data['signature']:
|
|
|
+ target.signature = form.cleaned_data['signature']
|
|
|
+ target.signature_preparsed = signature_markdown(target.get_acl(self.request),
|
|
|
+ form.cleaned_data['signature'])
|
|
|
+ else:
|
|
|
+ target.signature = None
|
|
|
+ target.signature_preparsed = None
|
|
|
+
|
|
|
+ # Do avatar ban mumbo-jumbo
|
|
|
+ if target.avatar_ban != form.cleaned_data['avatar_ban']:
|
|
|
+ if form.cleaned_data['avatar_ban']:
|
|
|
+ target.lock_avatar()
|
|
|
+ else:
|
|
|
+ target.default_avatar(self.request.settings)
|
|
|
+ target.avatar_ban = form.cleaned_data['avatar_ban']
|
|
|
+
|
|
|
+ # Set custom avatar
|
|
|
+ if form.cleaned_data['avatar_custom']:
|
|
|
+ target.delete_avatar()
|
|
|
+ target.avatar_image = form.cleaned_data['avatar_custom']
|
|
|
+ target.avatar_type = 'gallery'
|
|
|
+
|
|
|
+ # Update user roles
|
|
|
+ if self.request.user.is_god():
|
|
|
+ target.roles.clear()
|
|
|
+ for role in form.cleaned_data['roles']:
|
|
|
+ target.roles.add(role)
|
|
|
+ else:
|
|
|
+ for role in target.roles.all():
|
|
|
+ if not role.protected:
|
|
|
+ target.roles.remove(role)
|
|
|
+ for role in form.cleaned_data['roles']:
|
|
|
+ target.roles.add(role)
|
|
|
+
|
|
|
+ target.make_acl_key(True)
|
|
|
+ target.save(force_update=True)
|
|
|
+ return target, Message(_('Changes in user\'s "%(name)s" account have been saved.') % {'name': self.original_name}, 'success')
|
|
|
+
|
|
|
+
|
|
|
+class Delete(ButtonWidget):
|
|
|
+ admin = site.get_action('users')
|
|
|
+ id = 'delete'
|
|
|
+ fallback = 'admin_users'
|
|
|
+ notfound_message = _('Requested User account could not be found.')
|
|
|
+
|
|
|
+ def action(self, target):
|
|
|
+ if target.pk == self.request.user.id:
|
|
|
+ return Message(_('You cannot delete yourself.'), 'error'), False
|
|
|
+ if target.is_protected():
|
|
|
+ return Message(_('You cannot delete protected member.'), 'error'), False
|
|
|
+ target.delete()
|
|
|
+ User.objects.resync_monitor(self.request.monitor)
|
|
|
+ return Message(_('User "%(name)s" has been deleted.') % {'name': target.username}, 'success'), False
|
|
|
+
|
|
|
+
|
|
|
+def inactive(request):
|
|
|
+ token = 'list_filter_misago.users.models.User'
|
|
|
+ request.session[token] = {'activation': ['1', '2', '3']}
|
|
|
+ return redirect(reverse('admin_users'))
|
Ralfp