mirror of
https://github.com/freedombox/FreedomBox.git
synced 2026-03-25 09:21:10 +00:00
4b3b3c666a
- allows editing users (currently the groups and username) - allows any logged-in user to change the passwords of any other users - improved url highlighting of subsubmenu
129 lines
4.7 KiB
Python
129 lines
4.7 KiB
Python
#
|
|
# This file is part of Plinth.
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as
|
|
# published by the Free Software Foundation, either version 3 of the
|
|
# License, or (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Affero General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
|
|
from django.contrib import messages
|
|
from django.contrib.auth import update_session_auth_hash
|
|
from django.contrib.auth.forms import UserCreationForm, AdminPasswordChangeForm
|
|
from django.contrib.auth.models import User
|
|
from django.contrib.messages.views import SuccessMessageMixin
|
|
from django.core.urlresolvers import reverse, reverse_lazy
|
|
from django.views.generic.edit import (CreateView, DeleteView, UpdateView,
|
|
FormView)
|
|
from django.views.generic import ListView
|
|
from gettext import gettext as _
|
|
from .forms import UserForm
|
|
|
|
|
|
# TODO: we do not use the title anymore, and 'items' is also a python keyword.
|
|
# For all subsubmenus: let's remove title and just use the items list directly.
|
|
# Make sure to update the tests too.
|
|
subsubmenu = {'title': _('Users and Groups'),
|
|
'items': [{'url': reverse_lazy('users:index'),
|
|
'text': _('Users')},
|
|
{'url': reverse_lazy('users:create'),
|
|
'text': _('Create User')}]}
|
|
|
|
|
|
class PlinthContextMixin():
|
|
"""Add 'subsubmenu' and 'title' to the context of class-based views"""
|
|
|
|
def get_context_data(self, **kwargs):
|
|
"""Use self.title and the module-level subsubmenu"""
|
|
context = super(PlinthContextMixin, self).get_context_data(**kwargs)
|
|
context['subsubmenu'] = subsubmenu
|
|
context['title'] = getattr(self, 'title', '')
|
|
return context
|
|
|
|
class Meta:
|
|
abstract = True
|
|
|
|
|
|
class UserCreate(PlinthContextMixin, SuccessMessageMixin, CreateView):
|
|
form_class = UserCreationForm
|
|
template_name = 'users_create.html'
|
|
model = User
|
|
success_message = "%(username)s was created successfully"
|
|
success_url = reverse_lazy('users:create')
|
|
title = _('Create User')
|
|
|
|
|
|
class UserList(PlinthContextMixin, ListView):
|
|
model = User
|
|
template_name = 'users_list.html'
|
|
title = _('Edit or Delete User')
|
|
|
|
|
|
class UserUpdate(PlinthContextMixin, SuccessMessageMixin, UpdateView):
|
|
template_name = 'users_update.html'
|
|
form_class = UserForm
|
|
model = User
|
|
slug_field = "username"
|
|
success_message = "User %(username)s was changed successfully"
|
|
fields = ['username', 'password']
|
|
exclude = ('last_login', 'email', 'first_name', 'last_name')
|
|
title = _('Edit User')
|
|
|
|
def get_success_url(self):
|
|
return reverse('users:edit', kwargs={'slug': self.object.username})
|
|
|
|
|
|
class UserDelete(PlinthContextMixin, DeleteView):
|
|
"""Handle deleting users, showing a confirmation dialog first
|
|
|
|
On GET, display a confirmation page
|
|
on POST, delete the user
|
|
"""
|
|
template_name = 'users_delete.html'
|
|
model = User
|
|
slug_field = "username"
|
|
success_url = reverse_lazy('users:index')
|
|
title = _('Delete User')
|
|
|
|
def delete(self, *args, **kwargs):
|
|
"""Set the success message of deleting the user.
|
|
|
|
The SuccessMessageMixin doesn't work with the DeleteView on Django1.7,
|
|
so set the success message manually here.
|
|
"""
|
|
message = _("User %s was deleted" % self.kwargs['slug'])
|
|
output = super(UserDelete, self).delete(*args, **kwargs)
|
|
messages.success(self.request, message)
|
|
return output
|
|
|
|
|
|
class UserChangePassword(PlinthContextMixin, SuccessMessageMixin, FormView):
|
|
template_name = 'users_change_password.html'
|
|
form_class = AdminPasswordChangeForm
|
|
slug_field = "username"
|
|
model = User
|
|
title = _('Create User')
|
|
success_message = _("The password was changed successfully")
|
|
|
|
def get_form_kwargs(self):
|
|
"""Make the user object available to the form"""
|
|
kwargs = super(UserChangePassword, self).get_form_kwargs()
|
|
kwargs['user'] = User.objects.get(username=self.kwargs['slug'])
|
|
return kwargs
|
|
|
|
def get_success_url(self):
|
|
return reverse('users:edit', kwargs={'slug': self.kwargs['slug']})
|
|
|
|
def form_valid(self, form):
|
|
if form.user == self.request.user:
|
|
update_session_auth_hash(self.request, form.user)
|
|
return super(UserChangePassword, self).form_valid(form)
|