|
@@ -0,0 +1,210 @@
|
|
1
|
+# -*- coding: utf-8 -*-
|
|
2
|
+import transaction
|
|
3
|
+from sqlalchemy.exc import IntegrityError
|
|
4
|
+
|
|
5
|
+from tracim import CFG
|
|
6
|
+from tracim.command import AppContextCommand
|
|
7
|
+from tracim.command import Extender
|
|
8
|
+#from tracim.lib.auth.ldap import LDAPAuth
|
|
9
|
+#from tracim.lib.daemons import DaemonsManager
|
|
10
|
+#from tracim.lib.daemons import RadicaleDaemon
|
|
11
|
+#from tracim.lib.email import get_email_manager
|
|
12
|
+from tracim.exceptions import AlreadyExistError
|
|
13
|
+from tracim.exceptions import CommandAbortedError
|
|
14
|
+from tracim.lib.core.group import GroupApi
|
|
15
|
+from tracim.lib.core.user import UserApi
|
|
16
|
+from tracim.models import User
|
|
17
|
+
|
|
18
|
+
|
|
19
|
+class UserCommand(AppContextCommand):
|
|
20
|
+
|
|
21
|
+ ACTION_CREATE = 'create'
|
|
22
|
+ ACTION_UPDATE = 'update'
|
|
23
|
+
|
|
24
|
+ action = NotImplemented
|
|
25
|
+
|
|
26
|
+ def get_description(self):
|
|
27
|
+ return '''Create or update user.'''
|
|
28
|
+
|
|
29
|
+ def get_parser(self, prog_name):
|
|
30
|
+ parser = super().get_parser(prog_name)
|
|
31
|
+
|
|
32
|
+ parser.add_argument(
|
|
33
|
+ "-l",
|
|
34
|
+ "--login",
|
|
35
|
+ help='User login (email)',
|
|
36
|
+ dest='login',
|
|
37
|
+ required=True
|
|
38
|
+ )
|
|
39
|
+
|
|
40
|
+ parser.add_argument(
|
|
41
|
+ "-p",
|
|
42
|
+ "--password",
|
|
43
|
+ help='User password',
|
|
44
|
+ dest='password',
|
|
45
|
+ required=False,
|
|
46
|
+ default=None
|
|
47
|
+ )
|
|
48
|
+
|
|
49
|
+ parser.add_argument(
|
|
50
|
+ "-g",
|
|
51
|
+ "--add-to-group",
|
|
52
|
+ help='Add user to group',
|
|
53
|
+ dest='add_to_group',
|
|
54
|
+ nargs='*',
|
|
55
|
+ action=Extender,
|
|
56
|
+ default=[],
|
|
57
|
+ )
|
|
58
|
+
|
|
59
|
+ parser.add_argument(
|
|
60
|
+ "-rmg",
|
|
61
|
+ "--remove-from-group",
|
|
62
|
+ help='Remove user from group',
|
|
63
|
+ dest='remove_from_group',
|
|
64
|
+ nargs='*',
|
|
65
|
+ action=Extender,
|
|
66
|
+ default=[],
|
|
67
|
+ )
|
|
68
|
+
|
|
69
|
+ parser.add_argument(
|
|
70
|
+ "--send-email",
|
|
71
|
+ help='Send mail to user',
|
|
72
|
+ dest='send_email',
|
|
73
|
+ required=False,
|
|
74
|
+ action='store_true',
|
|
75
|
+ default=False,
|
|
76
|
+ )
|
|
77
|
+
|
|
78
|
+ return parser
|
|
79
|
+
|
|
80
|
+ def _user_exist(self, login):
|
|
81
|
+ return self._user_api.user_with_email_exists(login)
|
|
82
|
+
|
|
83
|
+ def _get_group(self, name):
|
|
84
|
+ return self._group_api.get_one_with_name(name)
|
|
85
|
+
|
|
86
|
+ def _add_user_to_named_group(self, user, group_name):
|
|
87
|
+ group = self._get_group(group_name)
|
|
88
|
+ if user not in group.users:
|
|
89
|
+ group.users.append(user)
|
|
90
|
+ self._session.flush()
|
|
91
|
+
|
|
92
|
+ def _remove_user_from_named_group(self, user, group_name):
|
|
93
|
+ group = self._get_group(group_name)
|
|
94
|
+ if user in group.users:
|
|
95
|
+ group.users.remove(user)
|
|
96
|
+ self._session.flush()
|
|
97
|
+
|
|
98
|
+ def _create_user(self, login, password, **kwargs):
|
|
99
|
+ if not password:
|
|
100
|
+ if self._password_required():
|
|
101
|
+ raise CommandAbortedError("You must provide -p/--password parameter")
|
|
102
|
+ password = ''
|
|
103
|
+
|
|
104
|
+ try:
|
|
105
|
+ user =self._user_api.create_user(email=login)
|
|
106
|
+ user.password = password
|
|
107
|
+ self._user_api.save(user)
|
|
108
|
+ # TODO - G.M - 04-04-2018 - [Caldav] Check this code
|
|
109
|
+ # # We need to enable radicale if it not already done
|
|
110
|
+ # daemons = DaemonsManager()
|
|
111
|
+ # daemons.run('radicale', RadicaleDaemon)
|
|
112
|
+
|
|
113
|
+ self._user_api.execute_created_user_actions(user)
|
|
114
|
+ except IntegrityError:
|
|
115
|
+ self._session.rollback()
|
|
116
|
+ raise AlreadyExistError()
|
|
117
|
+
|
|
118
|
+ return user
|
|
119
|
+
|
|
120
|
+ def _update_password_for_login(self, login, password):
|
|
121
|
+ user = self._user_api.get_one_by_email(login)
|
|
122
|
+ user.password = password
|
|
123
|
+ self._session.flush()
|
|
124
|
+ transaction.commit()
|
|
125
|
+
|
|
126
|
+ def take_app_action(self, parsed_args, app_context):
|
|
127
|
+ # TODO - G.M - 05-04-2018 -Refactor this in order
|
|
128
|
+ # to not setup object var outside of __init__ .
|
|
129
|
+ self._session = app_context['request'].dbsession
|
|
130
|
+ self._app_config = app_context['registry'].settings['CFG']
|
|
131
|
+ self._user_api = UserApi(
|
|
132
|
+ current_user=None,
|
|
133
|
+ session=self._session,
|
|
134
|
+ config=self._app_config,
|
|
135
|
+ )
|
|
136
|
+ self._group_api = GroupApi(
|
|
137
|
+ current_user=None,
|
|
138
|
+ session=self._session,
|
|
139
|
+ )
|
|
140
|
+ user = self._proceed_user(parsed_args)
|
|
141
|
+ self._proceed_groups(user, parsed_args)
|
|
142
|
+
|
|
143
|
+ print("User created/updated")
|
|
144
|
+
|
|
145
|
+ def _proceed_user(self, parsed_args):
|
|
146
|
+ self._check_context(parsed_args)
|
|
147
|
+
|
|
148
|
+ if self.action == self.ACTION_CREATE:
|
|
149
|
+ try:
|
|
150
|
+ user = self._create_user(
|
|
151
|
+ login=parsed_args.login,
|
|
152
|
+ password=parsed_args.password
|
|
153
|
+ )
|
|
154
|
+ except AlreadyExistError:
|
|
155
|
+ raise CommandAbortedError("Error: User already exist (use `user update` command instead)")
|
|
156
|
+ # TODO - G.M - 04-04-2018 - [Email] Check this code
|
|
157
|
+ # if parsed_args.send_email:
|
|
158
|
+ # email_manager = get_email_manager()
|
|
159
|
+ # email_manager.notify_created_account(
|
|
160
|
+ # user=user,
|
|
161
|
+ # password=parsed_args.password,
|
|
162
|
+ # )
|
|
163
|
+
|
|
164
|
+ else:
|
|
165
|
+ if parsed_args.password:
|
|
166
|
+ self._update_password_for_login(
|
|
167
|
+ login=parsed_args.login,
|
|
168
|
+ password=parsed_args.password
|
|
169
|
+ )
|
|
170
|
+ user = self._user_api.get_one_by_email(parsed_args.login)
|
|
171
|
+
|
|
172
|
+ return user
|
|
173
|
+
|
|
174
|
+ def _proceed_groups(self, user, parsed_args):
|
|
175
|
+ # User always in "users" group
|
|
176
|
+ self._add_user_to_named_group(user, 'users')
|
|
177
|
+
|
|
178
|
+ for group_name in parsed_args.add_to_group:
|
|
179
|
+ self._add_user_to_named_group(user, group_name)
|
|
180
|
+
|
|
181
|
+ for group_name in parsed_args.remove_from_group:
|
|
182
|
+ self._remove_user_from_named_group(user, group_name)
|
|
183
|
+
|
|
184
|
+ def _password_required(self):
|
|
185
|
+ # TODO - G.M - 04-04-2018 - [LDAP] Check this code
|
|
186
|
+ # if config.get('auth_type') == LDAPAuth.name:
|
|
187
|
+ # return False
|
|
188
|
+ return True
|
|
189
|
+
|
|
190
|
+ def _check_context(self, parsed_args):
|
|
191
|
+ # TODO - G.M - 04-04-2018 - [LDAP] Check this code
|
|
192
|
+ # if config.get('auth_type') == LDAPAuth.name:
|
|
193
|
+ # auth_instance = config.get('auth_instance')
|
|
194
|
+ # if not auth_instance.ldap_auth.user_exist(parsed_args.login):
|
|
195
|
+ # raise LDAPUserUnknown(
|
|
196
|
+ # "LDAP is enabled and user with login/email \"%s\" not found in LDAP" % parsed_args.login
|
|
197
|
+ # )
|
|
198
|
+ pass
|
|
199
|
+
|
|
200
|
+
|
|
201
|
+class CreateUserCommand(UserCommand):
|
|
202
|
+ action = UserCommand.ACTION_CREATE
|
|
203
|
+
|
|
204
|
+
|
|
205
|
+class UpdateUserCommand(UserCommand):
|
|
206
|
+ action = UserCommand.ACTION_UPDATE
|
|
207
|
+
|
|
208
|
+
|
|
209
|
+class LDAPUserUnknown(CommandAbortedError):
|
|
210
|
+ pass
|