Produits Entr'ouvert » w.c.s. » Au quotidien

try:

    import lasso

except ImportError:

    pass

from quixote import get_publisher, get_request, redirect, get_response, get_session_manager, get_session

from quixote.directory import AccessControlled, Directory

from quixote.util import StaticFile, FileStream

from qommon import template

from qommon.form import *

from qommon import get_cfg, get_logger

from qommon import errors

import qommon.ident.password

from qommon.ident.password_accounts import PasswordAccount

from qommon.admin.texts import TextsDirectory

from wcs.formdef import FormDef

import root

from announces import AnnounceSubscription

from strongbox import StrongboxItem, StrongboxType

from payments import Invoice, Regie, is_payment_supported

class InvoicesDirectory(Directory):

    _q_exports = ['']

    def _q_traverse(self, path):

        if not is_payment_supported():

            raise errors.TraversalError()

        get_response().breadcrumb.append(('invoices/', _('Invoices')))

        return Directory._q_traverse(self, path)

    def _q_index [html] (self):

        template.html_top(_('Invoices'))

        get_session().display_message()

        # TODO: a paragraph of explanations here could be useful

        invoices = Invoice.get_with_indexed_value(

                        str('user_id'), str(get_request().user.id))

        def cmp_invoice(a, b):

            t = cmp(a.regie_id, b.regie_id)

            if t != 0:

                return t

            return -cmp(a.date, b.date)

        invoices.sort(cmp_invoice)

        last_regie_id = None

        unpaid = False

        for invoice in invoices:

            if invoice.regie_id != last_regie_id:

                if last_regie_id:

                    '</ul>'

                    if unpaid:

                        '<input type="submit" value="%s"/>' % _('Pay Selected Invoices')

                    '</form>'

                last_regie_id = invoice.regie_id

                '<h3>%s</h3>' % Regie.get(last_regie_id).label

                unpaid = False

                '<form action="%spayment/init">' % get_publisher().get_root_url()

                '<ul>'

            '<li>'

            if not invoice.paid:

                '<input type="checkbox" name="invoice" value="%s"/>' % invoice.id

                unpaid = True

            misc.localstrftime(invoice.date)

            ' - '

            formdef = FormDef.get(invoice.formdef_id)

            try:

                formdata = formdef.data_class().get(invoice.formdata_id)

            except KeyError:

                # XXX: the form got removed, what to do with the invoice?

                # just ignore it?

                _('Unknown invoice')

            else:

                '<a href="%s">%s #%s</a>' % (formdata.get_url(), formdef.name, formdata.id)

            ' - '

            invoice.amount

            ' €'

            ' - '

            if invoice.paid:

                _('paid on %s') % misc.localstrftime(invoice.paid_date)

            else:

                '<a href="%spayment/redirect?invoice=%s">%s</a>' % (

                            formdata.get_url(), invoice.id, _('Pay'))

            '</li>'

        if last_regie_id:

            '</ul>'

            if unpaid:

                '<input type="submit" value="%s"/>' % _('Pay Selected Invoices')

            '</form>'

class StrongboxDirectory(Directory):

    _q_exports = ['', 'add', 'download', 'remove', 'pick', 'validate']

    def _q_traverse(self, path):

        if not get_cfg('misc', {}).get('aq-strongbox'):

            raise errors.TraversalError()

        get_response().breadcrumb.append(('strongbox/', _('Strongbox')))

        return Directory._q_traverse(self, path)

    def get_form(self):

        types = [(x.id, x.label) for x in StrongboxType.select()]

        form = Form(action='add', enctype='multipart/form-data')

        form.add(StringWidget, 'description', title=_('Description'), size=60)

        form.add(FileWidget, 'file', title=_('File'), required=True)

        form.add(SingleSelectWidget, 'type_id', title=_('Document Type'),

                 options = [(None, _('Not specified'))] + types)

        form.add(DateWidget, 'date_time', title = _('Document Date'))

        form.add_submit('submit', _('Upload'))

        return form

    def _q_index [html] (self):

        template.html_top(_('Strongbox'))

        # TODO: a paragraph of explanations here could be useful

        sffiles = StrongboxItem.get_with_indexed_value(

                        str('user_id'), str(get_request().user.id))

        if sffiles:

            '<table id="strongbox-items">'

            '<tr><th></th><th>%s</th><th>%s</th><th></th></tr>' % (

                _('Type'), _('Expiration'))

        else:

            '<p>'

            _('There is currently nothing in your strongbox.')

            '</p>'

        has_items_to_validate = False

        for i, sffile in enumerate(sffiles):

            expired = False

            if not sffile.validated_time:

                has_items_to_validate = True

                continue

            if sffile.expiration_time and sffile.expiration_time < time.localtime():

                expired = True

            if i%2:

                classnames = ['odd']

            else:

                classnames = ['even']

            if expired:

                classnames.append('expired')

            '<tr class="%s">' % ' '.join(classnames)

            '<td class="label">'

            sffile.get_display_name()

            '</td>'

            if sffile.type_id:

                '<td class="type">%s</td>' % StrongboxType.get(sffile.type_id).label

            else:

                '<td class="type">-</td>'

            if sffile.expiration_time:

                '<td class="expiration">%s' % strftime(misc.date_format(), sffile.expiration_time)

                if expired:

                    ' (%s)' % _('expired')

                '</td>'

            else:

                '<td class="expiration">-</td>'

            '<td class="actions">'

            ' [<a href="download?id=%s">%s</a>] ' % (sffile.id, _('download'))

            '[<a href="remove?id=%s">%s</a>] ' % (sffile.id, _('remove'))

            '</td>'

            '</tr>'

        if has_items_to_validate:

            '<tr><td colspan="4"><h3>%s</h3></td></tr>' % _('Proposed Items')

            for sffile in sffiles:

                if sffile.validated_time:

                    continue

                if sffile.expiration_time and sffile.expiration_time < time.localtime():

                    expired = True

                if i%2:

                    classnames = ['odd']

                else:

                    classnames = ['even']

                if expired:

                    classnames.append('expired')

                '<tr class="%s">' % ' '.join(classnames)

                '<td class="label">'

                sffile.get_display_name()

                '</td>'

                if sffile.type_id:

                    '<td class="type">%s</td>' % StrongboxType.get(sffile.type_id).label

                else:

                    '<td class="type">-</td>'

                if sffile.expiration_time:

                    '<td class="expiration">%s' % strftime(misc.date_format(), sffile.expiration_time)

                    if expired:

                        ' (%s)' % _('expired')

                    '</td>'

                else:

                    '<td class="expiration">-</td>'

                '<td class="actions">'

                ' [<a href="download?id=%s">%s</a>] ' % (sffile.id, _('download'))

                ' [<a href="validate?id=%s">%s</a>] ' % (sffile.id, _('validate'))

                ' [<a href="remove?id=%s">%s</a>] ' % (sffile.id, _('reject'))

                '</td>'

                '</tr>'

        if sffiles:

            '</table>'

        '<h3>%s</h3>' % _('Add a file to the strongbox')

        form = self.get_form()

        form.render()

    def add(self):

        form = self.get_form()

        if not form.is_submitted():

            if get_request().form.get('mode') == 'pick':

                return redirect('pick')

            else:

                return redirect('.')

        sffile = StrongboxItem()

        sffile.user_id = get_request().user.id

        sffile.description = form.get_widget('description').parse()

        sffile.validated_time = time.localtime()

        sffile.type_id = form.get_widget('type_id').parse()

        v = form.get_widget('date_time').parse()

        sffile.set_expiration_time_from_date(v)

        sffile.store()

        sffile.set_file(form.get_widget('file').parse())

        sffile.store()

        if get_request().form.get('mode') == 'pick':

            return redirect('pick')

        else:

            return redirect('.')

    def download(self):

        id = get_request().form.get('id')

        if not id:

            raise errors.TraversalError()

        try:

            sffile = StrongboxItem.get(id)

        except KeyError:

            raise errors.TraversalError()

        if str(sffile.user_id) != str(get_request().user.id):

            raise errors.TraversalError()

        filename = sffile.file.filename

        fd = file(filename)

        size = os.path.getsize(filename)

        response = get_response()

        response.set_content_type('application/octet-stream')

        response.set_header('content-disposition', 'attachment; filename="%s"' % sffile.file.base_filename)

        return FileStream(fd, size)

    def validate(self):

        id = get_request().form.get('id')

        if not id:

            raise errors.TraversalError()

        try:

            sffile = StrongboxItem.get(id)

        except KeyError:

            raise errors.TraversalError()

        if str(sffile.user_id) != str(get_request().user.id):

            raise errors.TraversalError()

        sffile.validated_time = time.time()

        sffile.store()

        return redirect('.')

    def remove(self):

        id = get_request().form.get('id')

        if not id:

            raise errors.TraversalError()

        try:

            sffile = StrongboxItem.get(id)

        except KeyError:

            raise errors.TraversalError()

        if str(sffile.user_id) != str(get_request().user.id):

            raise errors.TraversalError()

        sffile.remove_self()

        sffile.remove_file()

        return redirect('.')

    def pick [html] (self):

        field_id = str(get_request().form.get('id'))

        sffiles = StrongboxItem.get_with_indexed_value(

                        str('user_id'), str(get_request().user.id))

        '''

<script type="text/javascript">

function pick_file()

{

        filewidget = $('input[name=%(id)s$file]');

        filewidget.attr('disabled', 'disabled');

        value = $('input[name=pick]:checked').val();

        $('input[name=%(id)s$strongbox]').val(value);

        $.modal.close();

        return false;

}

</script>

        ''' % {'id': field_id}

        '<form id="strongbox-pick">'

        '<ul>'

        for sffile in sffiles:

            '<li><input type="radio" name="pick" value="%s"><label for="%s">%s</label>' % (

                            sffile.id, sffile.id, sffile.get_display_name())

            ' [<a href="download?id=%s">%s</a>] ' % (sffile.id, _('view'))

            '</input>'

            '</li>'

        '</ul>'

        '<p class="popup-buttons">'

        '<a class="button" href="#" onclick="return pick_file()">%s</a>' % _('Select')

        '<a class="button cancel" href="#">%s</a>' % _('Cancel')

        '</p>'

        '</form>'

        root_url = get_publisher().get_root_url()

        '<p>'

        '<a href="%smyspace/strongbox/" target="_blank">%s</a>' % (root_url,

                _('Open Strongbox Management'))

        '</p>'

class MyspaceDirectory(Directory):

    _q_exports = ['', 'profile', 'new', 'password', 'remove', 'announces',

                  'strongbox', 'invoices']

    strongbox = StrongboxDirectory()

    invoices = InvoicesDirectory()

    def _q_traverse(self, path):

        if path != ['new'] and (not get_request().user or get_request().user.anonymous):

            raise errors.AccessUnauthorizedError()

        get_response().filter['bigdiv'] = 'profile'

        get_response().breadcrumb.append(('myspace/', _('My Space')))

        # Migrate custom text settings

        texts_cfg = get_cfg('texts', {})

        if 'text-aq-top-of-profile' in texts_cfg and (

                        not 'text-top-of-profile' in texts_cfg):

            texts_cfg['text-top-of-profile'] = texts_cfg['text-aq-top-of-profile']

            del texts_cfg['text-aq-top-of-profile']

            get_publisher().write_cfg()

        return Directory._q_traverse(self, path)

    def _q_index [html] (self):

        user = get_request().user

        if not user:

            raise errors.AccessUnauthorizedError()

        template.html_top(_('My Space'))

        if user.anonymous:

            return redirect('new')

        user_formdef = user.get_formdef()

        user_forms = []

        if user:

            formdefs = FormDef.select(lambda x: not x.disabled, order_by = 'name')

            user_forms = []

            for formdef in formdefs:

                user_forms.extend(formdef.data_class().get_with_indexed_value(

                            'user_id', user.id))

                try:

                    user_forms.extend(formdef.data_class().get_with_indexed_value(

                            'user_hash', user.hash))

                except AttributeError:

                    pass

            user_forms.sort(lambda x,y: cmp(x.receipt_time, y.receipt_time))

        profile_links = []

        if user_formdef:

            profile_links.append('<a href="#my-profile">%s</a>' % _('My Profile'))

        if user_forms:

            profile_links.append('<a href="#my-forms">%s</a>' % _('My Forms'))

        if get_cfg('misc', {}).get('aq-strongbox'):

            profile_links.append('<a href="strongbox/">%s</a>' % _('My Strongbox'))

        if is_payment_supported():

            profile_links.append('<a href="invoices/">%s</a>' % _('My Invoices'))

        root_url = get_publisher().get_root_url()

        if user.is_admin or user.roles:

            profile_links.append('<a href="%sbackoffice/">%s</a>' % (root_url, _('Back office')))

        if user.is_admin:

            profile_links.append('<a href="%sadmin/">%s</a>' % (root_url, _('Admin')))

        if profile_links:

            '<p id="profile-links">'

            ' - '.join(profile_links)

            '</p>'

        if user_formdef:

            self._my_profile(user_formdef, user)

        self._index_buttons(user_formdef)

        try:

            x = PasswordAccount.get_on_index(get_request().user.id, str('user_id'))

        except KeyError:

            pass

        else:

            '<p>'

            _('You can delete your account freely from the services portal. '

              'This action is irreversible; it will destruct your personal '

              'datas and destruct the access to your request history.')

            ' <strong><a href="remove" rel="popup">%s</a></strong>.' % _('Delete My Account')

            '</p>'

        options = get_cfg('misc', {}).get('announce_themes')

        if options:

            try:

                subscription = AnnounceSubscription.get_on_index(

                        get_request().user.id, str('user_id'))

            except KeyError:

                pass

            else:

                '<p class="command"><a href="announces">%s</a></p>' % _(

                        'Edit my Subscription to Announces')

        if user_forms:

            '<h3 id="my-forms">%s</h3>' % _('My Forms')

            root.FormsRootDirectory().user_forms(user_forms)

    def _my_profile [html] (self, user_formdef, user):

        '<h3 id="my-profile">%s</h3>' % _('My Profile')

        TextsDirectory.get_html_text('top-of-profile')

        if user.form_data:

            '<ul>'

            for field in user_formdef.fields:

                if not hasattr(field, str('get_view_value')):

                    continue

                value = user.form_data.get(field.id)

                '<li>'

                field.label

                ' : '

                field.get_view_value(value)

                '</li>'

            '</ul>'

        else:

            '<p>%s</p>' % _('Empty profile')

    def _index_buttons [html] (self, form_data):

        passwords_cfg = get_cfg('passwords', {})

        ident_method = get_cfg('identification', {}).get('methods', ['idp'])[0]

        if get_session().lasso_session_dump:

            ident_method = 'idp'

        if form_data and ident_method != 'idp':

            '<p class="command"><a href="profile" rel="popup">%s</a></p>' % _('Edit My Profile')

        if ident_method == 'password' and passwords_cfg.get('can_change', False):

            '<p class="command"><a href="password" rel="popup">%s</a></p>' % _('Change My Password')

    def profile [html] (self):

        user = get_request().user

        if not user or user.anonymous:

            raise errors.AccessUnauthorizedError()

        form = Form(enctype = 'multipart/form-data')

        formdef = user.get_formdef()

        formdef.add_fields_to_form(form, form_data = user.form_data)

        form.add_submit('submit', _('Apply Changes'))

        form.add_submit('cancel', _('Cancel'))

        if form.get_submit() == 'cancel':

            return redirect('.')

        if form.is_submitted() and not form.has_errors():

            self.profile_submit(form, formdef)

            return redirect('.')

        template.html_top(_('Edit Profile'))

        form.render()

    def profile_submit(self, form, formdef):

        user = get_request().user

        data = formdef.get_data(form)

        user.set_attributes_from_formdata(data)

        user.form_data = data

        user.store()

    def password [html] (self):

        ident_method = get_cfg('identification', {}).get('methods', ['idp'])[0]

        if ident_method != 'password':

            raise errors.TraversalError()

        user = get_request().user

        if not user or user.anonymous:

            raise errors.AccessUnauthorizedError()

        form = Form(enctype = 'multipart/form-data')

        form.add(PasswordWidget, 'new_password', title = _('New Password'),

                required=True)

        form.add(PasswordWidget, 'new2_password', title = _('New Password (confirm)'),

                required=True) 

        form.add_submit('submit', _('Change Password'))

        form.add_submit('cancel', _('Cancel'))

        if form.get_submit() == 'cancel':

            return redirect('.')

        if form.is_submitted() and not form.has_errors():

            qommon.ident.password.check_password(form, 'new_password')

            new_password = form.get_widget('new_password').parse()

            new2_password = form.get_widget('new2_password').parse()

            if new_password != new2_password:

                form.set_error('new2_password', _('Passwords do not match'))

        if form.is_submitted() and not form.has_errors():

            self.submit_password(new_password)

            return redirect('.')

        template.html_top(_('Change Password'))

        form.render()

    def submit_password(self, new_password):

        passwords_cfg = get_cfg('passwords', {})

        account = PasswordAccount.get(get_session().username)

        account.hashing_algo = passwords_cfg.get('hashing_algo')

        account.set_password(new_password)

        account.store()

    def new [html] (self):

        if not get_request().user or not get_request().user.anonymous:

            raise errors.AccessUnauthorizedError()

        form = Form(enctype = 'multipart/form-data')

        formdef = get_publisher().user_class.get_formdef()

        if formdef:

            formdef.add_fields_to_form(form)

        else:

            get_logger().error('missing user formdef (in myspace/new)')

        form.add_submit('submit', _('Register'))

        if form.is_submitted() and not form.has_errors():

            user = get_publisher().user_class()

            data = formdef.get_data(form)

            user.set_attributes_from_formdata(data)

            user.name_identifiers = get_request().user.name_identifiers

            user.lasso_dump = get_request().user.lasso_dump

            user.set_attributes_from_formdata(data)

            user.form_data = data

            user.store()

            get_session().set_user(user.id)

            root_url = get_publisher().get_root_url()

            return redirect('%smyspace' % root_url)

        template.html_top(_('Welcome'))

        form.render()

    def remove [html] (self):

        user = get_request().user

        if not user or user.anonymous:

            raise errors.AccessUnauthorizedError()

        form = Form(enctype = 'multipart/form-data')

        form.widgets.append(HtmlWidget('<p>%s</p>' % _(

                        'Are you really sure you want to remove your account?')))

        form.add_submit('submit', _('Remove my account'))

        form.add_submit('cancel', _('Cancel'))

        if form.get_submit() == 'cancel':

            return redirect('.')

        if form.is_submitted() and not form.has_errors():

            user = get_request().user

            account = PasswordAccount.get_on_index(user.id, str('user_id'))

            get_session_manager().expire_session() 

            account.remove_self()

            return redirect(get_publisher().get_root_url())

        template.html_top(_('Removing Account'))

        form.render()

    def announces [html] (self):

        options = get_cfg('misc', {}).get('announce_themes')

        if not options:

            raise errors.TraversalError()

        subscription = AnnounceSubscription.get_on_index(get_request().user.id, str('user_id'))

        if not subscription:

            raise errors.TraversalError()

        if subscription.enabled_themes is None:

            enabled_themes = options

        else:

            enabled_themes = subscription.enabled_themes

        form = Form(enctype = 'multipart/form-data')

        form.add(CheckboxesWidget, 'themes', title=_('Announce Themes'),

                value=enabled_themes, elements=options,

                inline=False, required=False)

        form.add_submit('submit', _('Apply Changes'))

        form.add_submit('cancel', _('Cancel'))

        if form.get_submit() == 'cancel':

            return redirect('.')

        if form.is_submitted() and not form.has_errors():

            chosen_themes = form.get_widget('themes').parse()

            if chosen_themes == options:

                chosen_themes = None

            subscription.enabled_themes = chosen_themes

            subscription.store()

            return redirect('.')

        template.html_top()

        get_response().breadcrumb.append(('announces', _('Announce Subscription')))

        form.render()