Misago/misago/apps/admin/users/views.py

from django.core.urlresolvers import reverse as django_reverse
from django.db.models import Q
from django.shortcuts import redirect
from django.utils.translation import ugettext as _
from misago import messages
from misago.admin import site
from misago.apps.admin.widgets import *
from misago.conf import settings
from misago.markdown import signature_markdown
from misago.models import Forum, User
from misago.monitor import monitor, UpdatingMonitor
from misago.utils.strings import random_string
from misago.apps.admin.users.forms import UserForm, NewUserForm, SearchUsersForm

def reverse(route, target=None):
    if target:
        return django_reverse(route, kwargs={'target': target.pk, 'slug': target.username_slug})
    return django_reverse(route)


"""
Views
"""
class List(ListWidget):
    admin = site.get_action('users')
    id = 'list'
    columns = (
               ('username_slug', _("User Name"), 35),
               ('join_date', _("Join Date")),
               )
    default_sorting = 'username'
    sortables = {
                 'username_slug': 1,
                 'join_date': 0,
                }
    pagination = 25
    search_form = SearchUsersForm
    nothing_checked_message = _('You have to check at least one user.')
    actions = (
               ('activate', _("Activate users"), _("Are you sure you want to activate selected members?")),
               ('deactivate', _("Request e-mail validation"), _("Are you sure you want to deactivate selected members and request them to revalidate their e-mail addresses?")),
               ('remove_av', _("Remove and lock avatars"), _("Are you sure you want to remove selected members avatars and their ability to change them?")),
               ('remove_sig', _("Remove and lock signatures"), _("Are you sure you want to remove selected members signatures and their ability to edit them?")),
               ('remove_locks', _("Remove locks from avatars and signatures"), _("Are you sure you want to remove locks from selected members avatars and signatures?")),
               ('reset', _("Reset passwords"), _("Are you sure you want to reset selected members passwords?")),
               ('delete_content', _("Delete users with content"), _("Are you sure you want to delete selected users and their content?")),
               ('delete', _("Delete users"), _("Are you sure you want to delete selected users?")),
               )

    def set_filters(self, model, filters):
        if 'role' in filters:
            model = model.filter(roles__in=filters['role']).distinct()
        if 'rank' in filters:
            model = model.filter(rank__in=filters['rank'])
        if 'username' in filters:
            if ',' in filters['username']:
                qs = None
                for name in filters['username'].split(','):
                    name = name.strip().lower()
                    if name:
                        if qs:
                            qs = qs | Q(username_slug__contains=name)
                        else:
                            qs = Q(username_slug__contains=name)
                if qs:
                    model = model.filter(qs)
            else:
                model = model.filter(username_slug__contains=filters['username'].lower())
        if 'email' in filters:
            if ',' in filters['email']:
                qs = None
                for name in filters['email'].split(','):
                    name = name.strip().lower()
                    if name:
                        if qs:
                            qs = qs | Q(email__contains=name)
                        else:
                            qs = Q(email__contains=name)
                if qs:
                    model = model.filter(qs)
            else:
                model = model.filter(email__contains=filters['email'])
        if 'activation' in filters:
            model = model.filter(activation__in=filters['activation'])
        return model

    def prefetch_related(self, items):
        return items.prefetch_related('roles')

    def get_item_actions(self, item):
        return (
                self.action('pencil', _("Edit User Details"), reverse('admin_users_edit', item)),
                self.action('remove', _("Delete User"), reverse('admin_users_delete', item), post=True, prompt=_("Are you sure you want to delete this user account?")),
                )

    def action_activate(self, items, checked):
        for user in items:
            if user.pk in checked and user.activation > 0:
                with UpdatingMonitor() as cm:
                    monitor.decrease('users_inactive')
                user.activation = user.ACTIVATION_NONE
                user.save(force_update=True)
                user.email_user(
                                self.request,
                                'users/activation/admin_done',
                                _("Your Account has been activated"),
                                )

        return Message(_('Selected users accounts have been activated.'), messages.SUCCESS), reverse('admin_users')

    def action_deactivate(self, items, checked):
        # First loop - check for errors
        for user in items:
            if user.pk in checked:
                if user.is_protected() and not self.request.user.is_god():
                    return Message(_('You cannot force validation of protected members e-mails.'), messages.ERROR), reverse('admin_users')

        # Second loop - reset passwords
        for user in items:
            if user.pk in checked:
                user.activation = user.ACTIVATION_USER
                user.token = token = random_string(12)
                user.save(force_update=True)
                user.email_user(
                                self.request,
                                'users/activation/invalidated',
                                _("Account Activation"),
                                )

        return Message(_('Selected users accounts have been deactivated and new activation links have been sent to them.'), messages.SUCCESS), reverse('admin_users')

    def action_remove_av(self, items, checked):
        # First loop - check for errors
        for user in items:
            if user.pk in checked:
                if user.is_protected() and not self.request.user.is_god():
                    return Message(_('You cannot remove and block protected members avatars.'), messages.ERROR), reverse('admin_users')

        # Second loop - reset passwords
        for user in items:
            if user.pk in checked:
                user.lock_avatar()
                user.save(force_update=True)

        return Message(_('Selected users avatars were deleted and locked.'), messages.SUCCESS), reverse('admin_users')

    def action_remove_sig(self, items, checked):
        # First loop - check for errors
        for user in items:
            if user.pk in checked:
                if user.is_protected() and not self.request.user.is_god():
                    return Message(_('You cannot remove and block protected members signatures.'), messages.ERROR), reverse('admin_users')

        # Second loop - reset passwords
        for user in items:
            if user.pk in checked:
                user.signature_ban = True
                user.signature = ''
                user.signature_preparsed = ''
                user.save(force_update=True)

        return Message(_('Selected users signatures were deleted and locked.'), messages.SUCCESS), reverse('admin_users')

    def action_remove_locks(self, items, checked):
        for user in items:
            if user.pk in checked:
                user.default_avatar()
                user.avatar_ban = False
                user.signature_ban = False
                user.save(force_update=True)

        return Message(_('Selected users can now edit their avatars and signatures.'), messages.SUCCESS), reverse('admin_users')

    def action_reset(self, items, checked):
        # First loop - check for errors
        for user in items:
            if user.pk in checked:
                if user.is_protected() and not self.request.user.is_god():
                    return Message(_('You cannot reset protected members passwords.'), messages.ERROR), reverse('admin_users')

        # Second loop - reset passwords
        for user in items:
            if user.pk in checked:
                new_password = random_string(8)
                user.set_password(new_password)
                user.save(force_update=True)
                user.email_user(
                                self.request,
                                'users/password/new_admin',
                                _("Your New Password"),
                                {
                                 'password': new_password,
                                 },
                                )

        return Message(_('Selected users passwords have been reset successfully.'), messages.SUCCESS), reverse('admin_users')

    def action_delete_content(self, items, checked):
        for user in items:
            if user.pk in checked:
                if user.pk == self.request.user.id:
                    return Message(_('You cannot delete yourself.'), messages.ERROR), reverse('admin_users')
                if user.is_protected():
                    return Message(_('You cannot delete protected members.'), messages.ERROR), reverse('admin_users')

        for user in items:
            if user.pk in checked:
                user.delete_content()
                user.delete()

        for forum in Forum.objects.all():
            forum.sync()
            forum.save(force_update=True)

        User.objects.resync_monitor()
        return Message(_('Selected users and their content have been deleted successfully.'), messages.SUCCESS), reverse('admin_users')

    def action_delete(self, items, checked):
        for user in items:
            if user.pk in checked:
                if user.pk == self.request.user.id:
                    return Message(_('You cannot delete yourself.'), messages.ERROR), reverse('admin_users')
                if user.is_protected():
                    return Message(_('You cannot delete protected members.'), messages.ERROR), reverse('admin_users')

        for user in items:
            if user.pk in checked:
                user.delete()

        User.objects.resync_monitor()
        return Message(_('Selected users have been deleted successfully.'), messages.SUCCESS), reverse('admin_users')


class New(FormWidget):
    admin = site.get_action('users')
    id = 'new'
    fallback = 'admin_users'
    form = NewUserForm
    template = 'new'
    submit_button = _("Save User")

    def get_new_link(self, model):
        return reverse('admin_users_new')

    def get_edit_link(self, model):
        return reverse('admin_users_edit', model)

    def submit_form(self, form, target):
        new_user = User.objects.create_user(
                                            form.cleaned_data['username'],
                                            form.cleaned_data['email'],
                                            form.cleaned_data['password'],
                                            settings.default_timezone,
                                            self.request.META['REMOTE_ADDR'],
                                            no_roles=True,
                                            request=self.request,
                                            )
        new_user.title = form.cleaned_data['title']
        new_user.rank = form.cleaned_data['rank']

        for role in form.cleaned_data['roles']:
            new_user.roles.add(role)
        new_user.make_acl_key(True)
        new_user.save(force_update=True)

        return new_user, Message(_('New User has been created.'), messages.SUCCESS)


class Edit(FormWidget):
    admin = site.get_action('users')
    id = 'edit'
    name = _("Edit User")
    fallback = 'admin_users'
    form = UserForm
    target_name = 'username'
    notfound_message = _('Requested User could not be found.')
    submit_fallback = True

    def get_form_instance(self, form, model, initial, post=False):
        if post:
            return form(model, self.request.POST, request=self.request, initial=self.get_initial_data(model))
        return form(model, request=self.request, initial=self.get_initial_data(model))

    def get_link(self, model):
        return reverse('admin_users_edit', model)

    def get_edit_link(self, model):
        return self.get_link(model)

    def get_initial_data(self, model):
        return {
                'username': model.username,
                'title': model.title,
                'email': model.email,
                'rank': model.rank,
                'roles': model.roles.all(),
                'avatar_ban': model.avatar_ban,
                'avatar_ban_reason_user': model.avatar_ban_reason_user,
                'avatar_ban_reason_admin': model.avatar_ban_reason_admin,
                'signature': model.signature,
                'signature_ban': model.signature_ban,
                'signature_ban_reason_user': model.signature_ban_reason_user,
                'signature_ban_reason_admin': model.signature_ban_reason_admin,
                }

    def submit_form(self, form, target):
        target.title = form.cleaned_data['title']
        target.rank = form.cleaned_data['rank']
        target.avatar_ban_reason_user = form.cleaned_data['avatar_ban_reason_user']
        target.avatar_ban_reason_admin = form.cleaned_data['avatar_ban_reason_admin']
        target.signature_ban = form.cleaned_data['signature_ban']
        target.signature_ban_reason_user = form.cleaned_data['signature_ban_reason_user']
        target.signature_ban_reason_admin = form.cleaned_data['signature_ban_reason_admin']

        # Sync username?
        if target.username != self.original_name:
            target.sync_username()

        # Change email?
        if form.cleaned_data.get('email'):
            target.set_email(form.cleaned_data.get('email'))

        # Change password?
        if form.cleaned_data.get('new_password'):
            target.set_password(form.cleaned_data.get('new_password'))

        # Do signature mumbo-jumbo
        if form.cleaned_data['signature']:
            target.signature = form.cleaned_data['signature']
            target.signature_preparsed = signature_markdown(target.acl(),
                                                            form.cleaned_data['signature'])
        else:
            target.signature = None
            target.signature_preparsed = None

        # Do avatar ban mumbo-jumbo
        if target.avatar_ban != form.cleaned_data['avatar_ban']:
            if form.cleaned_data['avatar_ban']:
                target.lock_avatar()
            else:
                target.default_avatar()
        target.avatar_ban = form.cleaned_data['avatar_ban']

        # Set custom avatar
        if form.cleaned_data['avatar_custom']:
            target.delete_avatar()
            target.avatar_image = form.cleaned_data['avatar_custom']
            target.avatar_type = 'gallery'

        # Update user roles
        if self.request.user.is_god():
            target.roles.clear()
        else:
            target.roles.remove(*target.roles.filter(protected=False))
        for role in form.cleaned_data['roles']:
            target.roles.add(role)

        target.make_acl_key(True)
        target.save(force_update=True)
        return target, Message(_('Changes in user\'s "%(name)s" account have been saved.') % {'name': self.original_name}, messages.SUCCESS)


class Delete(ButtonWidget):
    admin = site.get_action('users')
    id = 'delete'
    fallback = 'admin_users'
    notfound_message = _('Requested User account could not be found.')

    def action(self, target):
        if target.pk == self.request.user.id:
            return Message(_('You cannot delete yourself.'), messages.ERROR), False
        if target.is_protected():
            return Message(_('You cannot delete protected member.'), messages.ERROR), False
        target.delete()
        User.objects.resync_monitor()
        return Message(_('User "%(name)s" has been deleted.') % {'name': target.username}, messages.SUCCESS), False


def inactive(request):
    token = 'list_filter_users.User'
    request.session[token] = {'activation': [1, 2, 3]}
    return redirect(reverse('admin_users'))