You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
321 lines
12 KiB
321 lines
12 KiB
from django.contrib.auth.decorators import login_required
|
|
from django.contrib.auth import logout, login, authenticate
|
|
from django.contrib.auth.views import LoginView
|
|
from django.core.exceptions import PermissionDenied
|
|
from django.http import HttpResponseRedirect
|
|
from django.shortcuts import render, redirect, get_object_or_404, resolve_url
|
|
from django.contrib import messages
|
|
from django.urls import NoReverseMatch
|
|
from django.utils.decorators import method_decorator
|
|
from django.utils.translation import ugettext as _
|
|
from django.views.generic import ListView, UpdateView
|
|
from django.conf import settings
|
|
|
|
from group_app.models import Group
|
|
|
|
from .models import UserProfile
|
|
from .forms import AvatarChangeForm
|
|
from djing import lib
|
|
from djing.lib.decorators import only_admins
|
|
from guardian.decorators import permission_required_or_403 as permission_required
|
|
from guardian.shortcuts import get_objects_for_user, assign_perm, remove_perm
|
|
|
|
|
|
login_decs = login_required, only_admins
|
|
|
|
|
|
class CustomLoginView(LoginView):
|
|
template_name = 'accounts/login.html'
|
|
|
|
def form_invalid(self, form):
|
|
messages.error(self.request, _('Wrong login or password, please try again'))
|
|
return super().form_invalid(form)
|
|
|
|
def get_success_url(self):
|
|
if self.request.user.is_staff:
|
|
return resolve_url('acc_app:profile')
|
|
return resolve_url('client_side:home')
|
|
|
|
|
|
def location_login(request):
|
|
nextl = request.GET.get('next')
|
|
nextl = '' if nextl == 'None' or nextl is None or nextl.isspace() else nextl
|
|
try:
|
|
auser = authenticate(request=request, byip=None)
|
|
if auser:
|
|
login(request, auser)
|
|
if nextl == 'None' or nextl is None or nextl == '':
|
|
if request.user.is_staff:
|
|
return redirect('acc_app:profile')
|
|
return redirect('client_side:home')
|
|
return redirect(nextl)
|
|
return render(request, 'accounts/login.html', {
|
|
'next': nextl
|
|
})
|
|
except NoReverseMatch:
|
|
return redirect('client_side:home')
|
|
|
|
|
|
@login_required
|
|
@only_admins
|
|
def profile_show(request, uid=0):
|
|
uid = lib.safe_int(uid)
|
|
|
|
if uid == 0:
|
|
return redirect('acc_app:other_profile', uid=request.user.id)
|
|
|
|
usr = get_object_or_404(UserProfile, id=uid)
|
|
if request.user != usr and not request.user.has_perm('accounts_app.can_view_userprofile', usr):
|
|
raise PermissionDenied
|
|
if request.method == 'POST':
|
|
usr.username = request.POST.get('username')
|
|
usr.fio = request.POST.get('fio')
|
|
usr.telephone = request.POST.get('telephone')
|
|
usr.is_active = request.POST.get('stat')
|
|
usr.is_admin = request.POST.get('is_admin')
|
|
usr.save()
|
|
return redirect('acc_app:other_profile', uid=uid)
|
|
|
|
return render(request, 'accounts/index.html', {
|
|
'uid': uid,
|
|
'userprofile': usr
|
|
})
|
|
|
|
|
|
@method_decorator(login_decs, name='dispatch')
|
|
class AvatarUpdateView(UpdateView):
|
|
form_class = AvatarChangeForm
|
|
template_name = 'accounts/settings/ch_info.html'
|
|
|
|
def get_object(self, queryset=None):
|
|
return self.request.user
|
|
|
|
def get_success_url(self):
|
|
return resolve_url('acc_app:other_profile', uid=self.request.user.id)
|
|
|
|
|
|
@login_required
|
|
@only_admins
|
|
def ch_info(request):
|
|
if request.method == 'POST':
|
|
user = request.user
|
|
user.username = request.POST.get('username')
|
|
user.fio = request.POST.get('fio')
|
|
user.email = request.POST.get('email')
|
|
user.telephone = request.POST.get('telephone')
|
|
|
|
psw = request.POST.get('oldpasswd')
|
|
if psw != '' and psw is not None:
|
|
if user.check_password(psw):
|
|
newpasswd = request.POST.get('newpasswd')
|
|
if newpasswd != '' and newpasswd is not None:
|
|
user.set_password(newpasswd)
|
|
user.save()
|
|
request.user = user
|
|
logout(request)
|
|
return redirect('acc_app:other_profile', uid=user.pk)
|
|
else:
|
|
messages.error(request, _('New password is empty, fill it'))
|
|
else:
|
|
messages.error(request, _('Wrong password'))
|
|
else:
|
|
messages.warning(request, _('Empty password, fill it'))
|
|
|
|
return render(request, 'accounts/settings/ch_info.html', {
|
|
'user': request.user
|
|
})
|
|
|
|
|
|
@login_required
|
|
@only_admins
|
|
@permission_required('accounts_app.add_userprofile')
|
|
def create_profile(request):
|
|
if request.method == 'POST':
|
|
username = request.POST.get('username')
|
|
|
|
user = UserProfile()
|
|
user.username = username
|
|
user.fio = request.POST.get('fio')
|
|
user.email = request.POST.get('email')
|
|
user.telephone = request.POST.get('telephone')
|
|
user.is_admin = True
|
|
|
|
passwd = request.POST.get('passwd')
|
|
conpasswd = request.POST.get('conpasswd')
|
|
if not passwd:
|
|
messages.error(request, _('You forget specify a password for the new account'))
|
|
|
|
if not conpasswd:
|
|
messages.error(request, _('You forget to repeat a password for the new account'))
|
|
|
|
if passwd == conpasswd:
|
|
user_qs = UserProfile.objects.filter(username=username)[:1]
|
|
if user_qs.count() == 0:
|
|
user.set_password(passwd)
|
|
user.save()
|
|
return redirect('acc_app:accounts_list')
|
|
else:
|
|
messages.error(request, _('Subscriber with this name already exist'))
|
|
else:
|
|
messages.error(request, _('Passwords does not match, try again'))
|
|
return render(request, 'accounts/create_acc.html', {
|
|
'newuser': user
|
|
})
|
|
return render(request, 'accounts/create_acc.html')
|
|
|
|
|
|
@login_required
|
|
@only_admins
|
|
def delete_profile(request, uid):
|
|
prf = get_object_or_404(UserProfile, id=uid)
|
|
if uid != request.user.id:
|
|
if not request.user.has_perm('acc_app.delete_userprofile', prf):
|
|
raise PermissionDenied
|
|
prf.delete()
|
|
messages.success(request, _('Profile has been deleted'))
|
|
return redirect('acc_app:accounts_list')
|
|
|
|
|
|
@method_decorator(login_decs, name='dispatch')
|
|
class AccountsListView(ListView):
|
|
http_method_names = 'get',
|
|
paginate_by = getattr(settings, 'PAGINATION_ITEMS_PER_PAGE', 10)
|
|
template_name = 'accounts/acc_list.html'
|
|
context_object_name = 'users'
|
|
|
|
def get_queryset(self):
|
|
users = UserProfile.objects.filter(is_admin=True).exclude(pk=self.request.user.pk)
|
|
users = get_objects_for_user(self.request.user, 'accounts_app.can_view_userprofile', users)
|
|
return users
|
|
|
|
|
|
@login_required
|
|
def perms(request, uid):
|
|
if not request.user.is_superuser:
|
|
raise PermissionDenied
|
|
userprofile = get_object_or_404(UserProfile, id=uid)
|
|
klasses = (
|
|
'abonapp.Abon', 'accounts_app.UserProfile',
|
|
'abonapp.AbonTariff', 'abonapp.AbonStreet', 'devapp.Device',
|
|
'abonapp.PassportInfo', 'abonapp.AdditionalTelephone', 'tariff_app.PeriodicPay',
|
|
'group_app.Group'
|
|
)
|
|
return render(request, 'accounts/perms/objects_types.html', {
|
|
'userprofile': userprofile,
|
|
'klasses': klasses
|
|
})
|
|
|
|
|
|
@method_decorator(login_decs, name='dispatch')
|
|
class PermissionClassListView(ListView):
|
|
http_method_names = 'get',
|
|
paginate_by = getattr(settings, 'PAGINATION_ITEMS_PER_PAGE', 10)
|
|
template_name = 'accounts/perms/objects_of_type.html'
|
|
context_object_name = 'objects'
|
|
|
|
def get(self, request, *args, **kwargs):
|
|
if not request.user.is_superuser:
|
|
raise PermissionDenied
|
|
return super(PermissionClassListView, self).get(request, *args, **kwargs)
|
|
|
|
def get_context_data(self, **kwargs):
|
|
context = super(PermissionClassListView, self).get_context_data(**kwargs)
|
|
context['klass'] = self.kwargs.get('klass_name')
|
|
context['klass_name'] = self.required_klass_name._meta.verbose_name
|
|
context['userprofile'] = get_object_or_404(UserProfile, pk=self.kwargs.get('uid'))
|
|
return context
|
|
|
|
def get_queryset(self):
|
|
from django.apps import apps
|
|
klass_name = self.kwargs.get('klass_name')
|
|
app_label, model_name = klass_name.split('.', 1)
|
|
klass = apps.get_model(app_label, model_name)
|
|
objects = klass.objects.all()
|
|
self.required_klass_name = klass
|
|
return objects
|
|
|
|
|
|
@login_required
|
|
@only_admins
|
|
def perms_edit(request, uid, klass_name, obj_id):
|
|
if not request.user.is_superuser:
|
|
raise PermissionDenied
|
|
from django.apps import apps
|
|
from .forms import MyUserObjectPermissionsForm
|
|
userprofile = get_object_or_404(UserProfile, pk=uid)
|
|
app_label, model_name = klass_name.split('.', 1)
|
|
klass = apps.get_model(app_label, model_name)
|
|
obj = get_object_or_404(klass, pk=obj_id)
|
|
|
|
frm = MyUserObjectPermissionsForm(userprofile, obj, request.POST or None)
|
|
if request.method == 'POST' and frm.is_valid():
|
|
frm.save_obj_perms()
|
|
messages.success(request, _('Permissions has successfully updated'))
|
|
|
|
return render(request, 'accounts/perms/perms_edit.html', {
|
|
'userprofile': userprofile,
|
|
'obj': obj,
|
|
'form': frm,
|
|
'klass': klass_name,
|
|
'klass_name': klass._meta.verbose_name
|
|
})
|
|
|
|
|
|
@login_required
|
|
@only_admins
|
|
def set_abon_groups_permission(request, uid):
|
|
# Only superuser can change object permissions
|
|
if not request.user.is_superuser:
|
|
raise PermissionDenied
|
|
userprofile = get_object_or_404(UserProfile, pk=uid)
|
|
|
|
picked_groups = get_objects_for_user(userprofile, 'group_app.can_view_group', accept_global_perms=False)
|
|
picked_groups = picked_groups.values_list('pk', flat=True)
|
|
|
|
if request.method == 'POST':
|
|
checked_groups = tuple(int(ag) for ag in request.POST.getlist('grp', default=0))
|
|
for grp in Group.objects.all():
|
|
if grp.pk in checked_groups and grp.pk not in picked_groups:
|
|
assign_perm('groupapp.can_view_group', userprofile, obj=grp)
|
|
elif grp.pk not in checked_groups and grp.pk in picked_groups:
|
|
remove_perm('groupapp.can_view_group', userprofile, obj=grp)
|
|
return redirect('acc_app:set_abon_groups_permission', uid)
|
|
groups = Group.objects.only('pk', 'title')
|
|
|
|
return render(request, 'accounts/set_abon_groups_permission.html', {
|
|
'uid': uid,
|
|
'userprofile': userprofile,
|
|
'groups': groups,
|
|
'picked_groups_ids': picked_groups
|
|
})
|
|
|
|
|
|
@method_decorator(login_decs, name='dispatch')
|
|
class ManageResponsibilityGroups(ListView):
|
|
http_method_names = ('get', 'post')
|
|
template_name = 'accounts/manage_responsibility_groups.html'
|
|
context_object_name = 'groups'
|
|
queryset = Group.objects.only('pk', 'title')
|
|
|
|
def get_success_url(self):
|
|
return resolve_url('acc_app:manage_responsibility_groups', self.kwargs.get('uid'))
|
|
|
|
def dispatch(self, request, *args, **kwargs):
|
|
uid = self.kwargs.get('uid')
|
|
self.object = get_object_or_404(UserProfile, pk=uid)
|
|
return super(ManageResponsibilityGroups, self).dispatch(request, *args, **kwargs)
|
|
|
|
def get_context_data(self, **kwargs):
|
|
context = super(ManageResponsibilityGroups, self).get_context_data(**kwargs)
|
|
context['uid'] = self.kwargs.get('uid')
|
|
context['userprofile'] = self.object
|
|
context['existing_groups'] = tuple(g.get('pk') for g in self.object.responsibility_groups.only('pk').values('pk'))
|
|
return context
|
|
|
|
def post(self, request, *args, **kwargs):
|
|
checked_groups = (int(ag) for ag in request.POST.getlist('grp'))
|
|
profile = self.object
|
|
profile.responsibility_groups.clear()
|
|
profile.responsibility_groups.add(*checked_groups)
|
|
messages.success(request, _('Responsibilities has been updated'))
|
|
return HttpResponseRedirect(self.get_success_url())
|