125 lines
5.1 KiB
Python
125 lines
5.1 KiB
Python
import textwrap
|
|
|
|
from django import forms
|
|
from django.core.exceptions import ValidationError
|
|
from django.utils.translation import ngettext, ugettext_lazy as _
|
|
|
|
from orchestra.contrib.orchestration import Operation
|
|
from orchestra.forms import UserCreationForm, UserChangeForm
|
|
|
|
from . import settings
|
|
from .models import SystemUser
|
|
from .validators import validate_home
|
|
|
|
|
|
class SystemUserFormMixin(object):
|
|
MOCK_USERNAME = '<username>'
|
|
|
|
def __init__(self, *args, **kwargs):
|
|
super(SystemUserFormMixin, self).__init__(*args, **kwargs)
|
|
duplicate = lambda n: (n, n)
|
|
if self.instance.pk:
|
|
username = self.instance.username
|
|
choices=(
|
|
duplicate(self.account.main_systemuser.get_base_home()),
|
|
duplicate(self.instance.get_base_home()),
|
|
)
|
|
else:
|
|
username = self.MOCK_USERNAME
|
|
choices=(
|
|
duplicate(self.account.main_systemuser.get_base_home()),
|
|
duplicate(SystemUser(username=username).get_base_home()),
|
|
)
|
|
self.fields['home'].widget = forms.Select(choices=choices)
|
|
if self.instance.pk and (self.instance.is_main or self.instance.has_shell):
|
|
# hidde home option for shell users
|
|
self.fields['home'].widget = forms.HiddenInput()
|
|
self.fields['directory'].widget = forms.HiddenInput()
|
|
elif self.instance.pk and (self.instance.get_base_home() == self.instance.home):
|
|
self.fields['directory'].widget = forms.HiddenInput()
|
|
else:
|
|
self.fields['directory'].widget = forms.TextInput(attrs={'size':'70'})
|
|
if not self.instance.pk or not self.instance.is_main:
|
|
# Some javascript for hidde home/directory inputs when convinient
|
|
self.fields['shell'].widget.attrs = {
|
|
'onChange': textwrap.dedent("""\
|
|
field = $(".field-home, .field-directory");
|
|
input = $("#id_home, #id_directory");
|
|
if ($.inArray(this.value, %s) < 0) {
|
|
field.addClass("hidden");
|
|
} else {
|
|
field.removeClass("hidden");
|
|
input.removeAttr("type");
|
|
};""" % str(list(settings.SYSTEMUSERS_DISABLED_SHELLS)))
|
|
}
|
|
self.fields['home'].widget.attrs = {
|
|
'onChange': textwrap.dedent("""\
|
|
field = $(".field-box.field-directory");
|
|
input = $("#id_directory");
|
|
if (this.value.search("%s") > 0) {
|
|
field.addClass("hidden");
|
|
} else {
|
|
field.removeClass("hidden");
|
|
input.removeAttr("type");
|
|
};""" % username)
|
|
}
|
|
|
|
def clean(self):
|
|
super(SystemUserFormMixin, self).clean()
|
|
home = self.cleaned_data.get('home')
|
|
if home and self.MOCK_USERNAME in home:
|
|
username = self.cleaned_data.get('username', '')
|
|
self.cleaned_data['home'] = home.replace(self.MOCK_USERNAME, username)
|
|
validate_home(self.instance, self.cleaned_data, self.account)
|
|
|
|
|
|
class SystemUserCreationForm(SystemUserFormMixin, UserCreationForm):
|
|
pass
|
|
|
|
|
|
class SystemUserChangeForm(SystemUserFormMixin, UserChangeForm):
|
|
pass
|
|
|
|
|
|
class PermissionForm(forms.Form):
|
|
set_action = forms.ChoiceField(label=_("Action"), initial='grant',
|
|
choices=(
|
|
('grant', _("Grant")),
|
|
('revoke', _("Revoke"))
|
|
))
|
|
base_home = forms.ChoiceField(label=_("Set permissions to"), choices=(),
|
|
help_text=_("User will be granted/revoked access to this directory."))
|
|
home_extension = forms.CharField(label=_("Home extension"), required=False, initial='',
|
|
widget=forms.TextInput(attrs={'size':'70'}), help_text=_("Relative to chosen home."))
|
|
permissions = forms.ChoiceField(label=_("Permissions"), initial='read-write',
|
|
choices=(
|
|
('read-write', _("Read and write")),
|
|
('read-only', _("Read only")),
|
|
('write-only', _("Write only"))
|
|
))
|
|
|
|
def __init__(self, *args, **kwargs):
|
|
self.instance = args[0]
|
|
super_args = []
|
|
if len(args) > 1:
|
|
super_args.append(args[1])
|
|
super(PermissionForm, self).__init__(*super_args, **kwargs)
|
|
related_users = type(self.instance).objects.filter(account=self.instance.account_id)
|
|
self.fields['base_home'].choices = (
|
|
(user.get_base_home(), user.get_base_home()) for user in related_users
|
|
)
|
|
|
|
def clean(self):
|
|
cleaned_data = super(PermissionForm, self).clean()
|
|
user = self.instance
|
|
user.set_perm_action = cleaned_data['set_action']
|
|
user.set_perm_base_home = cleaned_data['base_home']
|
|
user.set_perm_home_extension = cleaned_data['home_extension']
|
|
user.set_perm_perms = cleaned_data['permissions']
|
|
log = Operation.execute_action(user, 'validate_path')[0]
|
|
if 'path does not exists' in log.stderr:
|
|
raise ValidationError({
|
|
'home_extension': log.stderr,
|
|
})
|
|
return cleaned_data
|