diff options
Diffstat (limited to 'sphinx/web/admin.py')
| -rw-r--r-- | sphinx/web/admin.py | 258 |
1 files changed, 0 insertions, 258 deletions
diff --git a/sphinx/web/admin.py b/sphinx/web/admin.py deleted file mode 100644 index 12004475b..000000000 --- a/sphinx/web/admin.py +++ /dev/null @@ -1,258 +0,0 @@ -# -*- coding: utf-8 -*- -""" - sphinx.web.admin - ~~~~~~~~~~~~~~~~ - - Admin application parts. - - :copyright: 2007-2008 by Georg Brandl, Armin Ronacher. - :license: BSD. -""" - -from sphinx.web.util import render_template -from sphinx.web.wsgiutil import Response, RedirectResponse, NotFound -from sphinx.web.database import Comment - - -class AdminPanel(object): - """ - Provide the admin functionallity. - """ - - def __init__(self, app): - self.app = app - self.env = app.env - self.userdb = app.userdb - - def dispatch(self, req, page): - """ - Dispatch the requests for the current user in the admin panel. - """ - is_logged_in = req.user is not None - if is_logged_in: - privileges = self.userdb.privileges[req.user] - is_master_admin = 'master' in privileges - can_change_password = 'frozenpassword' not in privileges - else: - privileges = set() - can_change_password = is_master_admin = False - - # login and logout - if page == 'login': - return self.do_login(req) - elif not is_logged_in: - return RedirectResponse('@admin/login/') - elif page == 'logout': - return self.do_logout(req) - - # account maintance - elif page == 'change_password' and can_change_password: - return self.do_change_password(req) - elif page == 'manage_users' and is_master_admin: - return self.do_manage_users(req) - - # moderate comments - elif page.split('/')[0] == 'moderate_comments': - return self.do_moderate_comments(req, page[18:]) - - # missing page - elif page != '': - raise NotFound() - return Response(render_template(req, 'admin/index.html', { - 'is_master_admin': is_master_admin, - 'can_change_password': can_change_password - })) - - def do_login(self, req): - """ - Display login form and do the login procedure. - """ - if req.user is not None: - return RedirectResponse('@admin/') - login_failed = False - if req.method == 'POST': - if req.form.get('cancel'): - return RedirectResponse('') - username = req.form.get('username') - password = req.form.get('password') - if self.userdb.check_password(username, password): - req.login(username) - return RedirectResponse('@admin/') - login_failed = True - return Response(render_template(req, 'admin/login.html', { - 'login_failed': login_failed - })) - - def do_logout(self, req): - """ - Log the user out. - """ - req.logout() - return RedirectResponse('@admin/login/') - - def do_change_password(self, req): - """ - Allows the user to change his password. - """ - change_failed = change_successful = False - if req.method == 'POST': - if req.form.get('cancel'): - return RedirectResponse('@admin/') - pw = req.form.get('pw1') - if pw and pw == req.form.get('pw2'): - self.userdb.set_password(req.user, pw) - self.userdb.save() - change_successful = True - else: - change_failed = True - return Response(render_template(req, 'admin/change_password.html', { - 'change_failed': change_failed, - 'change_successful': change_successful - })) - - def do_manage_users(self, req): - """ - Manage other user accounts. Requires master privileges. - """ - add_user_mode = False - user_privileges = {} - users = sorted((user, []) for user in self.userdb.users) - to_delete = set() - generated_user = generated_password = None - user_exists = False - - if req.method == 'POST': - for item in req.form.getlist('delete'): - try: - to_delete.add(item) - except ValueError: - pass - for name, item in req.form.iteritems(): - if name.startswith('privileges-'): - user_privileges[name[11:]] = [x.strip() for x - in item.split(',')] - if req.form.get('cancel'): - return RedirectResponse('@admin/') - elif req.form.get('add_user'): - username = req.form.get('username') - if username: - if username in self.userdb.users: - user_exists = username - else: - generated_password = self.userdb.add_user(username) - self.userdb.save() - generated_user = username - else: - add_user_mode = True - elif req.form.get('aborted'): - return RedirectResponse('@admin/manage_users/') - - users = {} - for user in self.userdb.users: - if user not in user_privileges: - users[user] = sorted(self.userdb.privileges[user]) - else: - users[user] = user_privileges[user] - - new_users = users.copy() - for user in to_delete: - new_users.pop(user, None) - - self_destruction = req.user not in new_users or \ - 'master' not in new_users[req.user] - - if req.method == 'POST' and (not to_delete or - (to_delete and req.form.get('confirmed'))) and \ - req.form.get('update'): - old_users = self.userdb.users.copy() - for user in old_users: - if user not in new_users: - del self.userdb.users[user] - else: - self.userdb.privileges[user].clear() - self.userdb.privileges[user].update(new_users[user]) - self.userdb.save() - return RedirectResponse('@admin/manage_users/') - - return Response(render_template(req, 'admin/manage_users.html', { - 'users': users, - 'add_user_mode': add_user_mode, - 'to_delete': to_delete, - 'ask_confirmation': req.method == 'POST' and to_delete \ - and not self_destruction, - 'generated_user': generated_user, - 'generated_password': generated_password, - 'self_destruction': self_destruction, - 'user_exists': user_exists - })) - - def do_moderate_comments(self, req, url): - """ - Comment moderation panel. - """ - if url == 'recent_comments': - details_for = None - recent_comments = Comment.get_recent(20) - else: - details_for = url and self.env.get_real_filename(url) or None - recent_comments = None - to_delete = set() - edit_detail = None - - if 'edit' in req.args: - try: - edit_detail = Comment.get(int(req.args['edit'])) - except ValueError: - pass - - if req.method == 'POST': - for item in req.form.getlist('delete'): - try: - to_delete.add(int(item)) - except ValueError: - pass - if req.form.get('cancel'): - return RedirectResponse('@admin/') - elif req.form.get('confirmed'): - for comment_id in to_delete: - try: - Comment.get(comment_id).delete() - except ValueError: - pass - return RedirectResponse(req.path) - elif req.form.get('aborted'): - return RedirectResponse(req.path) - elif req.form.get('edit') and not to_delete: - if 'delete_this' in req.form: - try: - to_delete.add(req.form['delete_this']) - except ValueError: - pass - else: - try: - edit_detail = c = Comment.get(int(req.args['edit'])) - except ValueError: - pass - else: - if req.form.get('view'): - return RedirectResponse(c.url) - c.author = req.form.get('author', '') - c.author_mail = req.form.get('author_mail', '') - c.title = req.form.get('title', '') - c.comment_body = req.form.get('comment_body', '') - c.save() - self.app.cache.pop(edit_detail.associated_page, None) - return RedirectResponse(req.path) - - return Response(render_template(req, 'admin/moderate_comments.html', { - 'pages_with_comments': [{ - 'page_id': page_id, - 'title': page_id, #XXX: get title somehow - 'has_details': details_for == page_id, - 'comments': comments - } for page_id, comments in Comment.get_overview(details_for)], - 'recent_comments': recent_comments, - 'to_delete': to_delete, - 'ask_confirmation': req.method == 'POST' and to_delete, - 'edit_detail': edit_detail - })) |