views.py 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374
  1. from django.core.urlresolvers import reverse as django_reverse
  2. from django.db.models import Q
  3. from django.shortcuts import redirect
  4. from django.utils.translation import ugettext as _
  5. from misago.admin import site
  6. from misago.admin.widgets import *
  7. from misago.forums.models import Forum
  8. from misago.markdown import signature_markdown
  9. from misago.users.forms import UserForm, NewUserForm, SearchUsersForm
  10. from misago.users.models import User
  11. from misago.utils import get_random_string
  12. def reverse(route, target=None):
  13. if target:
  14. return django_reverse(route, kwargs={'target': target.pk, 'slug': target.username_slug})
  15. return django_reverse(route)
  16. """
  17. Views
  18. """
  19. class List(ListWidget):
  20. admin = site.get_action('users')
  21. id = 'list'
  22. columns = (
  23. ('username_slug', _("User Name"), 35),
  24. ('join_date', _("Join Date")),
  25. )
  26. default_sorting = 'username'
  27. sortables = {
  28. 'username_slug': 1,
  29. 'join_date': 0,
  30. }
  31. pagination = 25
  32. search_form = SearchUsersForm
  33. nothing_checked_message = _('You have to check at least one user.')
  34. actions = (
  35. ('activate', _("Activate users"), _("Are you sure you want to activate selected members?")),
  36. ('deactivate', _("Request e-mail validation"), _("Are you sure you want to deactivate selected members and request them to revalidate their e-mail addresses?")),
  37. ('remove_av', _("Remove and lock avatars"), _("Are you sure you want to remove selected members avatars and their ability to change them?")),
  38. ('remove_sig', _("Remove and lock signatures"), _("Are you sure you want to remove selected members signatures and their ability to edit them?")),
  39. ('remove_locks', _("Remove locks from avatars and signatures"), _("Are you sure you want to remove locks from selected members avatars and signatures?")),
  40. ('reset', _("Reset passwords"), _("Are you sure you want to reset selected members passwords?")),
  41. ('delete_content', _("Delete users with content"), _("Are you sure you want to delete selected users and their content?")),
  42. ('delete', _("Delete users"), _("Are you sure you want to delete selected users?")),
  43. )
  44. def set_filters(self, model, filters):
  45. if 'role' in filters:
  46. model = model.filter(roles__in=filters['role']).distinct()
  47. if 'rank' in filters:
  48. model = model.filter(rank__in=filters['rank'])
  49. if 'username' in filters:
  50. if ',' in filters['username']:
  51. qs = None
  52. for name in filters['username'].split(','):
  53. name = name.strip().lower()
  54. if name:
  55. if qs:
  56. qs = qs | Q(username_slug__contains=name)
  57. else:
  58. qs = Q(username_slug__contains=name)
  59. if qs:
  60. model = model.filter(qs)
  61. else:
  62. model = model.filter(username_slug__contains=filters['username'])
  63. if 'email' in filters:
  64. if ',' in filters['email']:
  65. qs = None
  66. for name in filters['email'].split(','):
  67. name = name.strip().lower()
  68. if name:
  69. if qs:
  70. qs = qs | Q(email__contains=name)
  71. else:
  72. qs = Q(email__contains=name)
  73. if qs:
  74. model = model.filter(qs)
  75. else:
  76. model = model.filter(email__contains=filters['email'])
  77. if 'activation' in filters:
  78. model = model.filter(activation__in=filters['activation'])
  79. return model
  80. def prefetch_related(self, items):
  81. return items.prefetch_related('roles')
  82. def get_item_actions(self, item):
  83. return (
  84. self.action('pencil', _("Edit User Details"), reverse('admin_users_edit', item)),
  85. self.action('remove', _("Delete User"), reverse('admin_users_delete', item), post=True, prompt=_("Are you sure you want to delete this user account?")),
  86. )
  87. def action_activate(self, items, checked):
  88. for user in items:
  89. if unicode(user.pk) in checked and user.activation > 0:
  90. self.request.monitor['users_inactive'] = int(self.request.monitor['users_inactive']) - 1
  91. user.activation = user.ACTIVATION_NONE
  92. user.save(force_update=True)
  93. user.email_user(
  94. self.request,
  95. 'users/activation/admin_done',
  96. _("Your Account has been activated"),
  97. )
  98. return Message(_('Selected users accounts have been activated.'), 'success'), reverse('admin_users')
  99. def action_deactivate(self, items, checked):
  100. # First loop - check for errors
  101. for user in items:
  102. if unicode(user.pk) in checked:
  103. if user.is_protected() and not self.request.user.is_god():
  104. return Message(_('You cannot force validation of protected members e-mails.'), 'error'), reverse('admin_users')
  105. # Second loop - reset passwords
  106. for user in items:
  107. if unicode(user.pk) in checked:
  108. user.activation = user.ACTIVATION_USER
  109. user.token = token = get_random_string(12)
  110. user.save(force_update=True)
  111. user.email_user(
  112. self.request,
  113. 'users/activation/invalidated',
  114. _("Account Activation"),
  115. )
  116. return Message(_('Selected users accounts have been deactivated and new activation links have been sent to them.'), 'success'), reverse('admin_users')
  117. def action_remove_av(self, items, checked):
  118. # First loop - check for errors
  119. for user in items:
  120. if unicode(user.pk) in checked:
  121. if user.is_protected() and not self.request.user.is_god():
  122. return Message(_('You cannot remove and block protected members avatars.'), 'error'), reverse('admin_users')
  123. # Second loop - reset passwords
  124. for user in items:
  125. if unicode(user.pk) in checked:
  126. user.lock_avatar()
  127. user.save(force_update=True)
  128. return Message(_('Selected users avatars were deleted and locked.'), 'success'), reverse('admin_users')
  129. def action_remove_sig(self, items, checked):
  130. # First loop - check for errors
  131. for user in items:
  132. if unicode(user.pk) in checked:
  133. if user.is_protected() and not self.request.user.is_god():
  134. return Message(_('You cannot remove and block protected members signatures.'), 'error'), reverse('admin_users')
  135. # Second loop - reset passwords
  136. for user in items:
  137. if unicode(user.pk) in checked:
  138. user.signature_ban = True
  139. user.signature = ''
  140. user.signature_preparsed = ''
  141. user.save(force_update=True)
  142. return Message(_('Selected users signatures were deleted and locked.'), 'success'), reverse('admin_users')
  143. def action_remove_locks(self, items, checked):
  144. for user in items:
  145. if unicode(user.pk) in checked:
  146. user.default_avatar(self.request.settings)
  147. user.avatar_ban = False
  148. user.signature_ban = False
  149. user.save(force_update=True)
  150. return Message(_('Selected users can now edit their avatars and signatures.'), 'success'), reverse('admin_users')
  151. def action_reset(self, items, checked):
  152. # First loop - check for errors
  153. for user in items:
  154. if unicode(user.pk) in checked:
  155. if user.is_protected() and not self.request.user.is_god():
  156. return Message(_('You cannot reset protected members passwords.'), 'error'), reverse('admin_users')
  157. # Second loop - reset passwords
  158. for user in items:
  159. if unicode(user.pk) in checked:
  160. new_password = get_random_string(8)
  161. user.set_password(new_password)
  162. user.save(force_update=True)
  163. user.email_user(
  164. self.request,
  165. 'users/password/new_admin',
  166. _("Your New Password"),
  167. {
  168. 'password': new_password,
  169. },
  170. )
  171. return Message(_('Selected users passwords have been reset successfully.'), 'success'), reverse('admin_users')
  172. def action_delete_content(self, items, checked):
  173. for user in items:
  174. if unicode(user.pk) in checked:
  175. if user.pk == self.request.user.id:
  176. return Message(_('You cannot delete yourself.'), 'error'), reverse('admin_users')
  177. if user.is_protected():
  178. return Message(_('You cannot delete protected members.'), 'error'), reverse('admin_users')
  179. for user in items:
  180. if unicode(user.pk) in checked:
  181. user.delete_content()
  182. user.delete()
  183. for forum in Forum.objects.all():
  184. forum.sync()
  185. forum.save(force_update=True)
  186. User.objects.resync_monitor(self.request.monitor)
  187. return Message(_('Selected users and their content have been deleted successfully.'), 'success'), reverse('admin_users')
  188. def action_delete(self, items, checked):
  189. for user in items:
  190. if unicode(user.pk) in checked:
  191. if user.pk == self.request.user.id:
  192. return Message(_('You cannot delete yourself.'), 'error'), reverse('admin_users')
  193. if user.is_protected():
  194. return Message(_('You cannot delete protected members.'), 'error'), reverse('admin_users')
  195. for user in items:
  196. if unicode(user.pk) in checked:
  197. user.delete()
  198. User.objects.resync_monitor(self.request.monitor)
  199. return Message(_('Selected users have been deleted successfully.'), 'success'), reverse('admin_users')
  200. class New(FormWidget):
  201. admin = site.get_action('users')
  202. id = 'new'
  203. fallback = 'admin_users'
  204. form = NewUserForm
  205. submit_button = _("Save User")
  206. def get_new_url(self, model):
  207. return reverse('admin_users_new')
  208. def get_edit_url(self, model):
  209. return reverse('admin_users_edit', model)
  210. def submit_form(self, form, target):
  211. new_user = User.objects.create_user(
  212. form.cleaned_data['username'],
  213. form.cleaned_data['email'],
  214. form.cleaned_data['password'],
  215. self.request.settings['default_timezone'],
  216. self.request.META['REMOTE_ADDR'],
  217. no_roles=True,
  218. request=self.request,
  219. )
  220. new_user.title = form.cleaned_data['title']
  221. new_user.rank = form.cleaned_data['rank']
  222. for role in form.cleaned_data['roles']:
  223. new_user.roles.add(role)
  224. new_user.make_acl_key(True)
  225. new_user.save(force_update=True)
  226. return new_user, Message(_('New User has been created.'), 'success')
  227. class Edit(FormWidget):
  228. admin = site.get_action('users')
  229. id = 'edit'
  230. name = _("Edit User")
  231. fallback = 'admin_users'
  232. form = UserForm
  233. tabbed = True
  234. target_name = 'username'
  235. notfound_message = _('Requested User could not be found.')
  236. submit_fallback = True
  237. def get_form_instance(self, form, model, initial, post=False):
  238. if post:
  239. return form(model, self.request.POST, request=self.request, initial=self.get_initial_data(model))
  240. return form(model, request=self.request, initial=self.get_initial_data(model))
  241. def get_url(self, model):
  242. return reverse('admin_users_edit', model)
  243. def get_edit_url(self, model):
  244. return self.get_url(model)
  245. def get_initial_data(self, model):
  246. return {
  247. 'username': model.username,
  248. 'title': model.title,
  249. 'email': model.email,
  250. 'rank': model.rank,
  251. 'roles': model.roles.all(),
  252. 'avatar_ban': model.avatar_ban,
  253. 'avatar_ban_reason_user': model.avatar_ban_reason_user,
  254. 'avatar_ban_reason_admin': model.avatar_ban_reason_admin,
  255. 'signature': model.signature,
  256. 'signature_ban': model.signature_ban,
  257. 'signature_ban_reason_user': model.signature_ban_reason_user,
  258. 'signature_ban_reason_admin': model.signature_ban_reason_admin,
  259. }
  260. def submit_form(self, form, target):
  261. target.title = form.cleaned_data['title']
  262. target.rank = form.cleaned_data['rank']
  263. target.avatar_ban_reason_user = form.cleaned_data['avatar_ban_reason_user']
  264. target.avatar_ban_reason_admin = form.cleaned_data['avatar_ban_reason_admin']
  265. target.signature_ban = form.cleaned_data['signature_ban']
  266. target.signature_ban_reason_user = form.cleaned_data['signature_ban_reason_user']
  267. target.signature_ban_reason_admin = form.cleaned_data['signature_ban_reason_admin']
  268. # Sync username?
  269. if target.username != self.original_name:
  270. target.sync_username()
  271. # Do signature mumbo-jumbo
  272. if form.cleaned_data['signature']:
  273. target.signature = form.cleaned_data['signature']
  274. target.signature_preparsed = signature_markdown(target.get_acl(self.request),
  275. form.cleaned_data['signature'])
  276. else:
  277. target.signature = None
  278. target.signature_preparsed = None
  279. # Do avatar ban mumbo-jumbo
  280. if target.avatar_ban != form.cleaned_data['avatar_ban']:
  281. if form.cleaned_data['avatar_ban']:
  282. target.lock_avatar()
  283. else:
  284. target.default_avatar(self.request.settings)
  285. target.avatar_ban = form.cleaned_data['avatar_ban']
  286. # Set custom avatar
  287. if form.cleaned_data['avatar_custom']:
  288. target.delete_avatar()
  289. target.avatar_image = form.cleaned_data['avatar_custom']
  290. target.avatar_type = 'gallery'
  291. # Update user roles
  292. if self.request.user.is_god():
  293. target.roles.clear()
  294. for role in form.cleaned_data['roles']:
  295. target.roles.add(role)
  296. else:
  297. for role in target.roles.all():
  298. if not role.protected:
  299. target.roles.remove(role)
  300. for role in form.cleaned_data['roles']:
  301. target.roles.add(role)
  302. target.make_acl_key(True)
  303. target.save(force_update=True)
  304. return target, Message(_('Changes in user\'s "%(name)s" account have been saved.') % {'name': self.original_name}, 'success')
  305. class Delete(ButtonWidget):
  306. admin = site.get_action('users')
  307. id = 'delete'
  308. fallback = 'admin_users'
  309. notfound_message = _('Requested User account could not be found.')
  310. def action(self, target):
  311. if target.pk == self.request.user.id:
  312. return Message(_('You cannot delete yourself.'), 'error'), False
  313. if target.is_protected():
  314. return Message(_('You cannot delete protected member.'), 'error'), False
  315. target.delete()
  316. User.objects.resync_monitor(self.request.monitor)
  317. return Message(_('User "%(name)s" has been deleted.') % {'name': target.username}, 'success'), False
  318. def inactive(request):
  319. token = 'list_filter_misago.users.models.User'
  320. request.session[token] = {'activation': ['1', '2', '3']}
  321. return redirect(reverse('admin_users'))