models.py 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467
  1. import hashlib
  2. import math
  3. from random import choice
  4. from path import path
  5. from django.conf import settings
  6. from django.contrib.auth.hashers import (
  7. check_password, make_password, is_password_usable, UNUSABLE_PASSWORD)
  8. from django.core.cache import cache, InvalidCacheBackendError
  9. from django.core.exceptions import ValidationError
  10. from django.core.mail import EmailMultiAlternatives
  11. from django.db import models
  12. from django.template import RequestContext
  13. from django.utils import timezone as tz_util
  14. from django.utils.translation import ugettext_lazy as _
  15. from misago.acl.builder import build_acl
  16. from misago.monitor.monitor import Monitor
  17. from misago.roles.models import Role
  18. from misago.settings.settings import Settings as DBSettings
  19. from misago.users.validators import validate_username, validate_password, validate_email
  20. from misago.utils import get_random_string, slugify
  21. class UserManager(models.Manager):
  22. """
  23. User Manager provides us with some additional methods for users
  24. """
  25. def get_blank_user(self):
  26. blank_user = User(
  27. join_date=tz_util.now(),
  28. join_ip='127.0.0.1'
  29. )
  30. return blank_user
  31. def resync_monitor(self, monitor):
  32. monitor['users'] = self.count()
  33. monitor['users_inactive'] = self.filter(activation__gt=0).count()
  34. last_user = self.latest('id')
  35. monitor['last_user'] = last_user.pk
  36. monitor['last_user_name'] = last_user.username
  37. monitor['last_user_slug'] = last_user.username_slug
  38. def create_user(self, username, email, password, timezone=False, ip='127.0.0.1', no_roles=False, activation=0, request=False):
  39. token = ''
  40. if activation > 0:
  41. token = get_random_string(12)
  42. try:
  43. db_settings = request.settings
  44. except AttributeError:
  45. db_settings = DBSettings()
  46. if timezone == False:
  47. timezone = db_settings['default_timezone']
  48. # Get first rank
  49. try:
  50. from misago.ranks.models import Rank
  51. default_rank = Rank.objects.filter(special=0).order_by('order')[0]
  52. except Rank.DoesNotExist:
  53. default_rank = None
  54. # Store user in database
  55. new_user = User(
  56. last_sync=tz_util.now(),
  57. join_date=tz_util.now(),
  58. join_ip=ip,
  59. activation=activation,
  60. token=token,
  61. timezone=timezone,
  62. rank=default_rank,
  63. )
  64. new_user.set_username(username)
  65. new_user.set_email(email)
  66. new_user.set_password(password)
  67. new_user.full_clean()
  68. new_user.default_avatar(db_settings)
  69. new_user.save(force_insert=True)
  70. # Set user roles?
  71. if not no_roles:
  72. from misago.roles.models import Role
  73. new_user.roles.add(Role.objects.get(token='registered'))
  74. new_user.make_acl_key()
  75. new_user.save(force_update=True)
  76. # Load monitor
  77. try:
  78. monitor = request.monitor
  79. except AttributeError:
  80. monitor = Monitor()
  81. # Update forum stats
  82. if activation == 0:
  83. monitor['users'] = int(monitor['users']) + 1
  84. monitor['last_user'] = new_user.pk
  85. monitor['last_user_name'] = new_user.username
  86. monitor['last_user_slug'] = new_user.username_slug
  87. else:
  88. monitor['users_inactive'] = int(monitor['users_inactive']) + 1
  89. # Return new user
  90. return new_user
  91. def get_by_email(self, email):
  92. return self.get(email_hash=hashlib.md5(email).hexdigest())
  93. def filter_stats(self, start, end):
  94. return self.filter(join_date__gte=start).filter(join_date__lte=end)
  95. class User(models.Model):
  96. """
  97. Misago User model
  98. """
  99. username = models.CharField(max_length=255,validators=[validate_username])
  100. username_slug = models.SlugField(max_length=255,unique=True,
  101. error_messages={'unique': _("This user name is already in use by another user.")})
  102. email = models.EmailField(max_length=255,validators=[validate_email])
  103. email_hash = models.CharField(max_length=32,unique=True,
  104. error_messages={'unique': _("This email address is already in use by another user.")})
  105. password = models.CharField(max_length=255)
  106. password_date = models.DateTimeField()
  107. avatar_type = models.CharField(max_length=10,null=True,blank=True)
  108. avatar_image = models.CharField(max_length=255,null=True,blank=True)
  109. signature = models.TextField(null=True,blank=True)
  110. signature_preparsed = models.TextField(null=True,blank=True)
  111. join_date = models.DateTimeField()
  112. join_ip = models.GenericIPAddressField()
  113. join_agent = models.TextField(null=True,blank=True)
  114. last_date = models.DateTimeField(null=True,blank=True)
  115. last_ip = models.GenericIPAddressField(null=True,blank=True)
  116. last_agent = models.TextField(null=True,blank=True)
  117. hide_activity = models.PositiveIntegerField(default=0)
  118. alert_ats = models.PositiveIntegerField(default=0)
  119. allow_pms = models.PositiveIntegerField(default=0)
  120. receive_newsletters = models.BooleanField(default=True)
  121. topics = models.PositiveIntegerField(default=0)
  122. posts = models.PositiveIntegerField(default=0)
  123. votes = models.PositiveIntegerField(default=0)
  124. karma_given_p = models.PositiveIntegerField(default=0)
  125. karma_given_n = models.PositiveIntegerField(default=0)
  126. karma_p = models.PositiveIntegerField(default=0)
  127. karma_n = models.PositiveIntegerField(default=0)
  128. following = models.PositiveIntegerField(default=0)
  129. followers = models.PositiveIntegerField(default=0)
  130. score = models.IntegerField(default=0,db_index=True)
  131. rank = models.ForeignKey('ranks.Rank',null=True,blank=True,db_index=True,on_delete=models.SET_NULL)
  132. last_sync = models.DateTimeField(null=True,blank=True)
  133. follows = models.ManyToManyField('self',related_name='follows_set',symmetrical=False)
  134. ignores = models.ManyToManyField('self',related_name='ignores_set',symmetrical=False)
  135. title = models.CharField(max_length=255,null=True,blank=True)
  136. last_post = models.DateTimeField(null=True,blank=True)
  137. last_search = models.DateTimeField(null=True,blank=True)
  138. alerts = models.PositiveIntegerField(default=0)
  139. alerts_new = models.PositiveIntegerField(default=0)
  140. activation = models.IntegerField(default=0)
  141. token = models.CharField(max_length=12,null=True,blank=True)
  142. avatar_ban = models.BooleanField(default=False)
  143. avatar_ban_reason_user = models.TextField(null=True,blank=True)
  144. avatar_ban_reason_admin = models.TextField(null=True,blank=True)
  145. signature_ban = models.BooleanField(default=False)
  146. signature_ban_reason_user = models.TextField(null=True,blank=True)
  147. signature_ban_reason_admin = models.TextField(null=True,blank=True)
  148. timezone = models.CharField(max_length=255,default='utc')
  149. roles = models.ManyToManyField('roles.Role')
  150. acl_key = models.CharField(max_length=12,null=True,blank=True)
  151. objects = UserManager()
  152. ACTIVATION_NONE = 0
  153. ACTIVATION_USER = 1
  154. ACTIVATION_ADMIN = 2
  155. ACTIVATION_CREDENTIALS = 3
  156. statistics_name = _('Users Registrations')
  157. def is_god(self):
  158. try:
  159. return self.is_god_cache
  160. except AttributeError:
  161. for user in settings.ADMINS:
  162. if user[1].lower() == self.email:
  163. self.is_god_cache = True
  164. return True
  165. self.is_god_cache = False
  166. return False
  167. def is_anonymous(self):
  168. return False
  169. def is_authenticated(self):
  170. return True
  171. def is_crawler(self):
  172. return False
  173. def is_protected(self):
  174. for role in self.roles.all():
  175. if role.protected:
  176. return True
  177. return False
  178. def lock_avatar(self):
  179. # Kill existing avatar and lock our ability to change it
  180. self.delete_avatar()
  181. self.avatar_ban = True
  182. # Pick new one from _locked gallery
  183. galleries = path(settings.STATICFILES_DIRS[0]).joinpath('avatars').joinpath('_locked')
  184. avatars_list = galleries.files('*.gif')
  185. avatars_list += galleries.files('*.jpg')
  186. avatars_list += galleries.files('*.jpeg')
  187. avatars_list += galleries.files('*.png')
  188. self.avatar_type = 'gallery'
  189. self.avatar_image = '/'.join(path(choice(avatars_list)).splitall()[-2:])
  190. def default_avatar(self, db_settings):
  191. if db_settings['default_avatar'] == 'gallery':
  192. try:
  193. avatars_list = []
  194. try:
  195. # First try, _default path
  196. galleries = path(settings.STATICFILES_DIRS[0]).joinpath('avatars').joinpath('_default')
  197. avatars_list += galleries.files('*.gif')
  198. avatars_list += galleries.files('*.jpg')
  199. avatars_list += galleries.files('*.jpeg')
  200. avatars_list += galleries.files('*.png')
  201. except Exception as e:
  202. pass
  203. # Second try, all paths
  204. if not avatars_list:
  205. avatars_list = []
  206. for directory in path(settings.STATICFILES_DIRS[0]).joinpath('avatars').dirs():
  207. if not directory[-7:] == '_locked':
  208. avatars_list += directory.files('*.gif')
  209. avatars_list += directory.files('*.jpg')
  210. avatars_list += directory.files('*.jpeg')
  211. avatars_list += directory.files('*.png')
  212. if avatars_list:
  213. # Pick random avatar from list
  214. self.avatar_type = 'gallery'
  215. self.avatar_image = '/'.join(path(choice(avatars_list)).splitall()[-2:])
  216. return True
  217. except Exception as e:
  218. pass
  219. self.avatar_type = 'gravatar'
  220. self.avatar_image = None
  221. return True
  222. def delete_avatar(self):
  223. if self.avatar_type == 'upload':
  224. # DELETE OUR AVATAR!!!
  225. pass
  226. def delete_content(self):
  227. if self.pk:
  228. for model_obj in models.get_models():
  229. try:
  230. model_obj.objects.delete_user_content(self)
  231. except AttributeError:
  232. pass
  233. def delete(self, *args, **kwargs):
  234. self.delete_avatar()
  235. super(User, self).delete(*args, **kwargs)
  236. def set_username(self, username):
  237. self.username = username.strip()
  238. self.username_slug = slugify(username)
  239. if self.pk:
  240. for model_obj in models.get_models():
  241. try:
  242. model_obj.objects.update_username(self)
  243. except AttributeError:
  244. pass
  245. def set_signature(self, signature):
  246. self.signature = signature.strip()
  247. self.signature_preparsed = ''
  248. if self.signature:
  249. import markdown
  250. self.signature_preparsed = markdown.markdown(signature, safe_mode='escape', output_format=settings.OUTPUT_FORMAT)
  251. def is_username_valid(self, e):
  252. try:
  253. raise ValidationError(e.message_dict['username'])
  254. except KeyError:
  255. pass
  256. try:
  257. raise ValidationError(e.message_dict['username_slug'])
  258. except KeyError:
  259. pass
  260. def is_email_valid(self, e):
  261. try:
  262. raise ValidationError(e.message_dict['email'])
  263. except KeyError:
  264. pass
  265. try:
  266. raise ValidationError(e.message_dict['email_hash'])
  267. except KeyError:
  268. pass
  269. def is_password_valid(self, e):
  270. try:
  271. raise ValidationError(e.message_dict['password'])
  272. except KeyError:
  273. pass
  274. def set_email(self, email):
  275. self.email = email.strip().lower()
  276. self.email_hash = hashlib.md5(self.email).hexdigest()
  277. def set_password(self, raw_password):
  278. self.password_date = tz_util.now()
  279. self.password = make_password(raw_password.strip())
  280. def set_last_visit(self, ip, agent, hidden=False):
  281. self.last_date = tz_util.now()
  282. self.last_ip = ip
  283. self.last_agent = agent
  284. self.last_hide = hidden
  285. def check_password(self, raw_password, mobile=False):
  286. """
  287. Returns a boolean of whether the raw_password was correct. Handles
  288. hashing formats behind the scenes.
  289. """
  290. def setter(raw_password):
  291. self.set_password(raw_password)
  292. self.save()
  293. # Is standard password allright?
  294. if check_password(raw_password, self.password, setter):
  295. return True
  296. # Check mobile password?
  297. if mobile:
  298. raw_password = raw_password[:1].lower() + raw_password[1:]
  299. else:
  300. password_reversed = u''
  301. for c in raw_password:
  302. r = c.upper()
  303. if r == c:
  304. r = c.lower()
  305. password_reversed += r
  306. raw_password = password_reversed
  307. return check_password(raw_password, self.password, setter)
  308. def get_roles(self):
  309. return self.roles.all()
  310. def make_acl_key(self):
  311. roles_ids = []
  312. for role in self.roles.all():
  313. roles_ids.append(str(role.pk))
  314. self.acl_key = 'acl_%s' % hashlib.md5('_'.join(roles_ids)).hexdigest()[0:8]
  315. return self.acl_key
  316. def get_acl(self, request):
  317. try:
  318. acl = cache.get(self.acl_key)
  319. if acl.version != request.monitor.acl_version:
  320. raise InvalidCacheBackendError()
  321. except AttributeError, InvalidCacheBackendError:
  322. # build acl cache
  323. acl = build_acl(request, self.get_roles())
  324. cache.set(self.acl_key, acl, 2592000)
  325. return acl
  326. def get_avatar(self, size='normal'):
  327. # Get uploaded avatar
  328. if self.avatar_type == 'upload':
  329. return settings.MEDIA_URL + 'avatars/' + self.avatar_image
  330. # Get gallery avatar
  331. if self.avatar_type == 'gallery':
  332. return settings.STATIC_URL + 'avatars/' + self.avatar_image
  333. # No avatar found, get gravatar
  334. if size == 'big':
  335. size = 150;
  336. elif size == 'small':
  337. size = 64;
  338. elif size == 'tiny':
  339. size = 46;
  340. else:
  341. size = 100
  342. return 'http://www.gravatar.com/avatar/%s?s=%s' % (hashlib.md5(self.email).hexdigest(), size)
  343. def get_title(self):
  344. if self.title:
  345. return self.title
  346. if self.rank:
  347. return self.rank.title
  348. return None
  349. def get_style(self):
  350. if self.rank:
  351. return self.rank.style
  352. return ''
  353. def email_user(self, request, template, subject, context={}):
  354. templates = request.theme.get_email_templates(template)
  355. context = RequestContext(request, context)
  356. context['author'] = context['user']
  357. context['user'] = self
  358. # Set message recipient
  359. if settings.DEBUG and settings.CATCH_ALL_EMAIL_ADDRESS:
  360. recipient = settings.CATCH_ALL_EMAIL_ADDRESS
  361. else:
  362. recipient = self.email
  363. # Build and send message
  364. email = EmailMultiAlternatives(subject, templates[0].render(context), settings.EMAIL_HOST_USER, [recipient])
  365. email.attach_alternative(templates[1].render(context), "text/html")
  366. email.send()
  367. def get_activation(self):
  368. activations = ['none', 'user', 'admin', 'credentials']
  369. return activations[self.activation]
  370. def get_date(self):
  371. return self.join_date
  372. def sync_user(self):
  373. print 'SYNCING USER!'
  374. class Guest(object):
  375. """
  376. Misago Guest dummy
  377. """
  378. def is_anonymous(self):
  379. return True
  380. def is_authenticated(self):
  381. return False
  382. def is_crawler(self):
  383. return False
  384. def get_roles(self):
  385. return Role.objects.filter(token='guest')
  386. def make_acl_key(self):
  387. return 'acl_%s' % hashlib.md5(str(Role.objects.get(token='guest').pk)).hexdigest()[0:8]
  388. class Crawler(Guest):
  389. """
  390. Misago Crawler dummy
  391. """
  392. def __init__(self, username):
  393. self.username = username
  394. def is_anonymous(self):
  395. return True
  396. def is_authenticated(self):
  397. return False
  398. def is_crawler(self):
  399. return True