Merge branch 'master' of ssh://git.planet-lab.org/git/plstackapi
[plstackapi.git] / planetstack / core / models / user.py
1 import os
2 import datetime
3 from collections import defaultdict
4 from django.db import models
5 from django.db.models import F, Q
6 from core.models import PlCoreBase,Site
7 from core.models.deployment import Deployment
8 from django.contrib.auth.models import AbstractBaseUser, BaseUserManager
9 from timezones.fields import TimeZoneField
10
11 # Create your models here.
12 class UserManager(BaseUserManager):
13     def get_query_set(self):
14         return super(UserManager, self).get_query_set().filter(deleted=False)
15
16     def create_user(self, email, firstname, lastname, password=None):
17         """
18         Creates and saves a User with the given email, date of
19         birth and password.
20         """
21         if not email:
22             raise ValueError('Users must have an email address')
23
24         user = self.model(
25             email=UserManager.normalize_email(email),
26             firstname=firstname,
27             lastname=lastname,
28             password=password
29         )
30         #user.set_password(password)
31         user.is_admin = True
32         user.save(using=self._db)
33         return user
34
35     def create_superuser(self, email, firstname, lastname, password):
36         """
37         Creates and saves a superuser with the given email, date of
38         birth and password.
39         """
40         user = self.create_user(email,
41             password=password,
42             firstname=firstname,
43             lastname=lastname
44         )
45         user.is_admin = True
46         user.save(using=self._db)
47         return user
48
49
50 class User(AbstractBaseUser):
51
52     class Meta:
53         app_label = "core"
54
55     email = models.EmailField(
56         verbose_name='email address',
57         max_length=255,
58         unique=True,
59         db_index=True,
60     )
61
62     username = models.CharField(max_length=255, default="Something" )
63
64     firstname = models.CharField(help_text="person's given name", max_length=200)
65     lastname = models.CharField(help_text="person's surname", max_length=200)
66
67     phone = models.CharField(null=True, blank=True, help_text="phone number contact", max_length=100)
68     user_url = models.URLField(null=True, blank=True)
69     site = models.ForeignKey(Site, related_name='users', help_text="Site this user will be homed too", null=True)
70     public_key = models.TextField(null=True, blank=True, max_length=1024, help_text="Public key string")
71
72     is_active = models.BooleanField(default=True)
73     is_admin = models.BooleanField(default=True)
74     is_staff = models.BooleanField(default=True)
75     is_readonly = models.BooleanField(default=False)
76
77     created = models.DateTimeField(auto_now_add=True)
78     updated = models.DateTimeField(auto_now=True)
79     enacted = models.DateTimeField(null=True, default=None)
80     backend_status = models.CharField(max_length=140,
81                                       default="Provisioning in progress")
82     deleted = models.BooleanField(default=False)
83
84     timezone = TimeZoneField()
85
86     objects = UserManager()
87
88     USERNAME_FIELD = 'email'
89     REQUIRED_FIELDS = ['firstname', 'lastname']
90
91     def isReadOnlyUser(self):
92         return self.is_readonly
93
94     def get_full_name(self):
95         # The user is identified by their email address
96         return self.email
97
98     def get_short_name(self):
99         # The user is identified by their email address
100         return self.email
101
102     @property
103     def keyname(self):
104         return self.email[:self.email.find('@')]
105
106     def __unicode__(self):
107         return self.email
108
109     def has_perm(self, perm, obj=None):
110         "Does the user have a specific permission?"
111         # Simplest possible answer: Yes, always
112         return True
113
114     def has_module_perms(self, app_label):
115         "Does the user have permissions to view the app `app_label`?"
116         # Simplest possible answer: Yes, always
117         return True
118
119     def is_superuser(self):
120         return False
121
122 #    def get_roles(self):
123 #        from core.models.site import SitePrivilege
124 #        from core.models.slice import SliceMembership
125 #
126 #        site_privileges = SitePrivilege.objects.filter(user=self)
127 #        slice_memberships = SliceMembership.objects.filter(user=self)
128 #        roles = defaultdict(list)
129 #        for site_privilege in site_privileges:
130 #            roles[site_privilege.role.role_type].append(site_privilege.site.login_base)
131 #        for slice_membership in slice_memberships:
132 #            roles[slice_membership.role.role_type].append(slice_membership.slice.name)
133 #        return roles   
134
135     def save(self, *args, **kwds):
136         if not self.id:
137             self.set_password(self.password)    
138         self.username = self.email
139         super(User, self).save(*args, **kwds)  
140
141     @staticmethod
142     def select_by_user(user):
143         if user.is_admin:
144             qs = User.objects.all()
145         else:
146             # can see all users at any site where this user has pi role
147             from core.models.site import SitePrivilege
148             site_privs = SitePrivilege.objects.filter(user=user)
149             sites = [sp.site for sp in site_privs if sp.role.role == 'pi']
150             # get site privs of users at these sites
151             site_privs = SitePrivilege.objects.filter(site__in=sites)
152             user_ids = [sp.user.id for sp in site_privs] + [user.id] 
153             qs = User.objects.filter(Q(site__in=sites) | Q(id__in=user_ids))
154         return qs            
155
156              
157     
158 class UserDeployments(PlCoreBase):
159     user = models.ForeignKey(User)
160     deployment = models.ForeignKey(Deployment)
161     kuser_id = models.CharField(null=True, blank=True, max_length=200, help_text="Keystone user id")
162
163     def __unicode__(self):  return u'%s %s' % (self.user, self.deployment.name)
164
165     @staticmethod
166     def select_by_user(user):
167         if user.is_admin:
168             qs = UserDeployments.objects.all()
169         else:
170             users = Users.select_by_user(user)
171             qs = Usereployments.objects.filter(user__in=slices)
172         return qs