Produits Entr'ouvert » w.c.s.

from quixote import get_session, get_publisher, get_request, get_response

from quixote.directory import Directory, AccessControlled

from quixote.html import htmltext, TemplateIO

from qommon.admin.root import AdminDirectory

import settings

import forms

import roles

import users

import categories

import logger

import workflows

import bounces

from qommon import errors, get_cfg

class RootDirectory(AccessControlled, AdminDirectory):

    _q_exports = ['']

    settings = settings.SettingsDirectory()

    forms = forms.FormsDirectory()

    roles = roles.RolesDirectory()

    users = users.UsersDirectory()

    categories = categories.CategoriesDirectory()

    logger = logger.LoggerDirectory()

    workflows = workflows.WorkflowsDirectory()

    bounces = bounces.BouncesDirectory()

    menu_items = [

    def _q_access(self):

        get_response().breadcrumb.append( ('admin/', _('Administration')) )

        req = get_request()

        if os.path.exists(os.path.join(get_publisher().app_dir, 'ADMIN_FOR_ALL')):

            get_response().filter['admin_for_all'] = True

            if req.user and req.user.is_admin:

                # if the user had access to the admin, ADMIN_FOR_ALL was

                # certainly added because something wrong happened when setting

                # fine-grained access permissions with roles; so we give the

                # user all possible roles.

                req.user.roles = [x.id for x in roles.Role.select()]

            return

        session = get_session()

        if req.user:

            if get_publisher().user_class.count() == 0:

                # this means user logged in anonymously

                pass

            elif not req.user.is_admin:

                raise errors.AccessForbiddenError()

        else:

            if get_publisher().user_class.count() > 0:

                raise errors.AccessUnauthorizedError()

        return

    def get_intro_text(self):

        return _('''

w.c.s. is a web application which allows to design and set up online forms.

It gives users the ability to create web forms easily without requiring any

other skill than familiarity with web surfing.''')

    def _q_index(self):

        from menu import html_top

        html_top('/')

        r = TemplateIO(html=True)

        r += htmltext('<div class="bo-block"><p>%s</p></div>') % self.get_intro_text()

        r += htmltext('<ul class="apps">')

        for k, v in self.get_menu_items():

            if k.strip('/') not in ('forms', 'workflows', 'users', 'roles',

                    'categories', 'settings'):

                # limit this space to menu entries that have icons.

                continue

            r += htmltext('<li class="zone-%s"><a href="%s">') % (k.strip('/'), k)

            if callable(v):

                r += v()

            else:

                r += _(v)

            r += htmltext('</a></li>')

        r += htmltext('</ul>')

        r += htmltext('<br class="clear">')

        r += htmltext('<p id="for-more-info">%s</p>') % _('For more information:')

        r += htmltext('<ul>')

        r += htmltext('<li><a href="http://wcs.labs.libre-entreprise.org">%s</a></li>') % _('Web site')

        if get_publisher().admin_help_url and get_request().language in get_publisher().admin_help_url:

            doc_url = get_publisher().admin_help_url[get_request().language]

            r += htmltext('<li><a href="%s">%s</a></li>') % (doc_url, _('Online documentation'))

        r += htmltext('</ul>')

        get_response().filter['sidebar'] = str(self.get_sidebar())

        return r.getvalue()

    def get_sidebar(self):

        from menu import get_vc_version

        r = TemplateIO(html=True)

        version = get_vc_version()

        if version:

            r += htmltext('<div class="bo-block"><p class="version-info">')

            r += _('Version:')

            r += ' '

            r += version

            r += htmltext('</p></div>')

        r += htmltext('<div class="bo-block">')

        r += gpl()

        r += htmltext('</div>')

        return r.getvalue()

    def _q_lookup(self, component):

        if not component in [str(x[0]).strip('/') for x in self.menu_items]:

            raise errors.TraversalError()

        authorised_roles = get_cfg('admin-permissions', {}).get(component)

        if authorised_roles and not os.path.exists(os.path.join(get_publisher().app_dir, 'ADMIN_FOR_ALL')):

            user_roles = set(get_request().user.roles)

            if not user_roles.intersection(authorised_roles):

                raise errors.AccessForbiddenError()

        return getattr(self, component)

    def get_menu_items(self):

        if not get_request().user:

            return self.menu_items

        user_roles = set(get_request().user.roles or [])

        if not get_cfg('admin-permissions', {}):

            return self.menu_items

        menu_items = self.menu_items[:]

        for k, v in self.menu_items:

            if not k.endswith(str('/')):

                continue

            k = k.strip(str('/'))

            if not k:

                continue

            authorised_roles = get_cfg('admin-permissions', {}).get(k)

            if not authorised_roles:

                continue

            if not user_roles.intersection(authorised_roles):

                menu_items.remove((k+'/', v))

        return menu_items

        user = get_request().user

        if not user and get_publisher().user_class.count() > 0:

            raise errors.AccessUnauthorizedError(

                    public_msg = _('Access to backoffice is restricted to authorized persons only. '\

                                   'Please login.'))

        if user and not user.can_go_in_backoffice():

            raise errors.AccessForbiddenError()

-