71
54
user['local_password'] = self.context.passhash is not None
74
class UserEditSchema(formencode.Schema):
75
nick = formencode.validators.UnicodeString(not_empty=True)
76
email = formencode.validators.Email(not_empty=False,
79
class UserEditView(XHTMLView):
80
"""A form to change a user's details."""
81
template = 'templates/user-edit.html'
85
def filter(self, stream, ctx):
86
return stream | HTMLFormFiller(data=ctx['data'])
88
def populate(self, req, ctx):
89
if req.method == 'POST':
90
data = dict(req.get_fieldstorage())
92
validator = UserEditSchema()
93
data = validator.to_python(data, state=req)
94
self.context.nick = data['nick']
95
self.context.email = unicode(data['email']) if data['email'] \
98
req.throw_redirect(req.uri)
99
except formencode.Invalid, e:
100
errors = e.unpack_errors()
102
data = {'nick': self.context.nick,
103
'email': self.context.email
107
ctx['format_datetime'] = ivle.date.make_date_nice
108
ctx['format_datetime_short'] = ivle.date.format_datetime_for_paragraph
111
ctx['user'] = self.context
113
ctx['errors'] = errors
115
class UserAdminSchema(formencode.Schema):
116
admin = formencode.validators.StringBoolean(if_missing=False)
117
fullname = formencode.validators.UnicodeString(not_empty=True)
118
studentid = formencode.validators.UnicodeString(not_empty=False,
122
class UserAdminView(XHTMLView):
123
"""A form for admins to change more of a user's details."""
124
template = 'templates/user-admin.html'
127
def authorize(self, req):
128
"""Only allow access if the requesting user is an admin."""
129
return req.user.admin
131
def filter(self, stream, ctx):
132
return stream | HTMLFormFiller(data=ctx['data'])
134
def populate(self, req, ctx):
135
if req.method == 'POST':
136
data = dict(req.get_fieldstorage())
138
validator = UserAdminSchema()
139
data = validator.to_python(data, state=req)
141
if self.context is req.user:
142
# Admin checkbox is disabled -- assume unchanged
143
data['admin'] = self.context.admin
145
self.context.admin = data['admin']
146
self.context.fullname = data['fullname'] \
147
if data['fullname'] else None
148
self.context.studentid = data['studentid'] \
149
if data['studentid'] else None
151
req.throw_redirect(req.uri)
152
except formencode.Invalid, e:
153
errors = e.unpack_errors()
155
data = {'admin': self.context.admin,
156
'fullname': self.context.fullname,
157
'studentid': self.context.studentid,
162
ctx['user'] = self.context
163
# Disable the Admin checkbox if editing oneself
164
ctx['disable_admin'] = self.context is req.user
166
ctx['errors'] = errors
168
class PasswordChangeView(XHTMLView):
169
"""A form to change a user's password, with knowledge of the old one."""
170
template = 'templates/user-password-change.html'
174
def authorize(self, req):
175
"""Only allow access if the requesting user holds the permission,
176
and the target user has a password set. Otherwise we might be
177
clobbering external authn.
179
return super(PasswordChangeView, self).authorize(req) and \
180
self.context.passhash is not None
182
def populate(self, req, ctx):
184
if req.method == 'POST':
185
data = dict(req.get_fieldstorage())
186
if data.get('old_password') is None or \
187
not self.context.authenticate(data.get('old_password')):
188
error = 'Incorrect password.'
189
elif data.get('new_password') != data.get('new_password_again'):
190
error = 'New passwords do not match.'
191
elif not data.get('new_password'):
192
error = 'New password cannot be empty.'
194
self.context.password = data['new_password']
196
req.throw_redirect(req.uri)
199
ctx['user'] = self.context
202
class PasswordResetView(XHTMLView):
203
"""A form to reset a user's password, without knowledge of the old one."""
204
template = 'templates/user-password-reset.html'
207
def authorize(self, req):
208
"""Only allow access if the requesting user is an admin."""
209
return req.user.admin
211
def populate(self, req, ctx):
213
if req.method == 'POST':
214
data = dict(req.get_fieldstorage())
215
if data.get('new_password') != data.get('new_password_again'):
216
error = 'New passwords do not match.'
217
elif not data.get('new_password'):
218
error = 'New password cannot be empty.'
220
self.context.password = data['new_password']
222
req.throw_redirect(req.uri)
224
ctx['user'] = self.context
57
class UserSettingsView(XHTMLView):
58
template = 'templates/user-settings.html'
62
def __init__(self, req, login):
63
self.context = ivle.database.User.get_by_login(req.store, login)
64
if self.context is None:
67
def populate(self, req, ctx):
68
self.plugin_scripts[Plugin] = ['settings.js']
69
self.scripts_init = ['revert_settings']
71
ctx['login'] = self.context.login
227
73
class Plugin(ViewPlugin, MediaPlugin):
229
75
The Plugin class for the user plugin.
232
forward_routes = (root_to_user,)
233
reverse_routes = (user_url,)
234
views = [(ApplicationRoot, 'users', UsersView),
235
(ivle.database.User, '+index', UserEditView),
236
(ivle.database.User, '+admin', UserAdminView),
237
(ivle.database.User, '+changepassword', PasswordChangeView),
238
(ivle.database.User, '+resetpassword', PasswordResetView),
239
(ivle.database.User, '+index', UserRESTView, 'api'),
243
('users', 'Users', 'Display and edit all users',
244
'users.png', 'users', 0, True)
77
# Magic attribute: urls
78
# Sequence of pairs/triples of
79
# (regex str, handler class, kwargs dict)
80
# The kwargs dict is passed to the __init__ of the view object
82
('~:login/+settings', UserSettingsView),
83
('api/~:login', UserRESTView),
247
public_forward_routes = forward_routes
248
public_reverse_routes = reverse_routes
250
86
media = 'user-media'
added
removed
ivle/webapp/admin/user.py
