portal/actions.py

   1 from django.http                import HttpResponse
   2 from manifold.core.query        import Query
   3 from manifoldapi.manifoldapi    import execute_query,execute_admin_query
   4 from portal.models              import PendingUser, PendingSlice, PendingAuthority
   5 import json
   6
   7 from django.contrib.auth.models import User
   8 from django.template.loader     import render_to_string
   9 from django.core.mail           import EmailMultiAlternatives, send_mail
  10
  11 from myslice.theme              import ThemeView
  12
  13 # LS Client - By Bruno Soares (UFG)
  14 from lsapiclient                import LaboraSchedulerClient
  15
  16 theme = ThemeView()
  17
  18 # Thierry: moving this right into the code so
  19 # most people can use myslice without having to install sfa
  20 # XXX tmp sfa dependency, should be moved to SFA gateway
  21 #from sfa.util.xrn                import Xrn
  22
  23
  24 # Get the list of authorities
  25
  26 def authority_get_pis(request, authority_hrn):
  27     query = Query.get('authority').filter_by('authority_hrn', '==', authority_hrn).select('pi_users')
  28     results = execute_admin_query(request, query)
  29     print "authority_get_pis = %s" % results
  30     # NOTE: temporarily commented. Because results is giving empty list.
  31     # Needs more debugging
  32     #if not results:
  33     #    raise Exception, "Authority not found: %s" % authority_hrn
  34     #result, = results
  35     #return result['pi_users']
  36     return results
  37
  38 def authority_get_pi_emails(request, authority_hrn):
  39     pi_users = authority_get_pis(request,authority_hrn)
  40     print "pi_users = %s" % pi_users
  41
  42     if any(pi['pi_users'] == None or not pi['pi_users']  for pi in pi_users):
  43         #theme.template_name = 'email_default_recipients.txt'
  44         #default_email = render_to_string(theme.template, request)
  45         #default_email = default_email.replace('\n', '')
  46         #return default_email
  47         # the above doesn't work
  48         return ['support@myslice.info']
  49     else:
  50         pi_user_hrns = [ hrn for x in pi_users for hrn in x['pi_users'] ]
  51         query = Query.get('user').filter_by('user_hrn', 'included', pi_user_hrns).select('user_email')
  52         results = execute_admin_query(request, query)
  53         return [result['user_email'] for result in results]
  54
  55 #clear user credentials
  56 def clear_user_creds(request, user_email):
  57     try:
  58         user_query  = Query().get('local:user').filter_by('email', '==', user_email).select('user_id','email','password','config')
  59         user_details = execute_admin_query(request, user_query)
  60
  61         # getting the user_id from the session
  62         for user_detail in user_details:
  63             user_id = user_detail['user_id']
  64             user_email = user_detail['email']
  65
  66         account_query  = Query().get('local:account').filter_by('user_id', '==', user_id).select('user_id','platform_id','auth_type','config')
  67         account_details = execute_admin_query(request, account_query)
  68
  69         platform_query  = Query().get('local:platform').select('platform_id','platform')
  70         platform_details = execute_admin_query(request, platform_query)
  71
  72         for account_detail in account_details:
  73             for platform_detail in platform_details:
  74                 if platform_detail['platform_id'] == account_detail['platform_id']:
  75                     if 'myslice' in platform_detail['platform']:
  76                         account_config = json.loads(account_detail['config'])
  77                         user_cred = account_config.get('delegated_user_credential','N/A')
  78                         if 'N/A' not in user_cred:
  79                             user_hrn = account_config.get('user_hrn','N/A')
  80                             user_pub_key = json.dumps(account_config.get('user_public_key','N/A'))
  81                             user_priv_key = json.dumps(account_config.get('user_private_key','N/A'))
  82                             updated_config = '{"user_public_key":'+ user_pub_key + ', "user_private_key":'+ user_priv_key + ', "user_hrn":"'+ user_hrn + '"}'
  83                             user_params = { 'config': updated_config}
  84                             manifold_update_account(request, user_id,user_params)
  85                             return user_email
  86                         else:
  87                             return None
  88
  89     except Exception,e:
  90         print "Exception in actions.py in clear_user_creds %s" % e
  91         return None
  92
  93 def is_pi(wsgi_request, user_hrn, authority_hrn):
  94     # XXX could be done in a single query !
  95
  96     # select pi_authorities from user where user_hrn == "ple.upmc.jordan_auge"
  97     query = Query.get('user').filter_by('user_hrn', '==', user_hrn).select('pi_authorities')
  98     results = execute_admin_query(wsgi_request, query)
  99     if not results:
 100         # XXX Warning ?
 101         return False
 102     result = results[0]
 103     user_authority_hrns = result.get('pi_authorities', [])
 104     return authority_hrn in user_authority_hrns
 105
 106 # SFA get record
 107
 108 def sfa_get_user(request, user_hrn, pub):
 109     query_sfa_user = Query.get('user').filter_by('user_hrn', '==', user_hrn)
 110     result_sfa_user = execute_query(request, query_sfa_user)
 111     return result_sfa_user
 112
 113 def sfa_update_user(request, user_hrn, user_params):
 114     # user_params: keys [public_key]
 115     if 'email' in user_params:
 116         user_params['user_email'] = user_params['email']
 117     query = Query.update('user').filter_by('user_hrn', '==', user_hrn).set(user_params).select('user_hrn')
 118     results = execute_query(request,query)
 119     return results
 120
 121 def sfa_add_authority(request, authority_params):
 122     query = Query.create('authority').set(authority_params).select('authority_hrn')
 123     results = execute_query(request, query)
 124     print "sfa_add_auth results=",results
 125     if not results:
 126         raise Exception, "Could not create %s. Already exists ?" % authority_params['hrn']
 127     return results
 128
 129 def sfa_add_user_to_slice(request, user_hrn, slice_params):
 130 # UPDATE myslice:slice SET researcher=['ple.upmc.jordan_auge','ple.inria.thierry_parmentelat','ple.upmc.loic_baron','ple.upmc.ciro_scognamiglio','ple.upmc.mohammed-yasin_rahman','ple.upmc.azerty'] where slice_hrn=='ple.upmc.myslicedemo'
 131     query_current_users = Query.get('slice').select('user').filter_by('slice_hrn','==',slice_params['hrn'])
 132     results_current_users = execute_query(request, query_current_users)
 133     slice_params['researcher'] = slice_params['researcher'] | results_current_users
 134     query = Query.update('slice').filter_by('user_hrn', '==', user_hrn).set(slice_params).select('slice_hrn')
 135     results = execute_query(request, query)
 136 # Also possible but not supported yet
 137 # UPDATE myslice:user SET slice=['ple.upmc.agent','ple.upmc.myslicedemo','ple.upmc.tophat'] where user_hrn=='ple.upmc.azerty'
 138     if not results:
 139         raise Exception, "Could not create %s. Already exists ?" % slice_params['hrn']
 140     return results
 141
 142 # Propose hrn
 143
 144 def manifold_add_user(wsgi_request, request):
 145     """Add a Manifold user corresponding to a user request.
 146
 147     Args:
 148         wsgi_request: a WSGIRequest instance
 149         request (dict): a dictionary containing the user request built from the
 150             form.
 151
 152     Returns:
 153         The user_id of the inserted user.
 154
 155     Raises:
 156         ?
 157
 158     """
 159
 160     authority_hrn = request['authority_hrn']
 161     request['authority_hrn'] = authority_hrn.split(".")[0]
 162
 163     USER_CONFIG = '{"firstname": "%(first_name)s", "lastname": "%(last_name)s", "authority": "%(authority_hrn)s"}'
 164
 165     user_params = {
 166         'email'     : request['username'],
 167         'password'  : request['password'],
 168         'config'    : USER_CONFIG % request,
 169         'status'    : 1
 170     }
 171
 172     request['authority_hrn'] = authority_hrn
 173
 174     query = Query.create('local:user').set(user_params).select('email')
 175     results = execute_admin_query(request, query)
 176     if not results:
 177         raise Exception, "Failed creating manifold user: %s" % user_params['email']
 178     result = results[0]
 179     return result['email']
 180
 181 def manifold_update_user(request, email, user_params):
 182     # user_params: password, config e.g.,
 183     query = Query.update('local:user').filter_by('email', '==', email).set(user_params).select('email')
 184     results = execute_admin_query(request,query)
 185     # NOTE: results remains empty and goes to Exception. However, it updates the manifold DB.
 186     # That's why I commented the exception part. -- Yasin
 187     #if not results:
 188     #    raise Exception, "Failed updating manifold user: %s" % user_params['email']
 189     #result, = results
 190     return results
 191
 192 def manifold_add_account(request, account_params):
 193     query = Query.create('local:account').set(account_params).select(['user', 'platform'])
 194     results = execute_admin_query(request,query)
 195     if not results:
 196         raise Exception, "Failed creating manifold account on platform %s for user: %s" % (account_params['platform'], account_params['user'])
 197     result, = results
 198     return result['user_id']
 199
 200 def manifold_update_account(request,user_id,account_params):
 201     # account_params: config
 202     query = Query.update('local:account').filter_by('platform', '==', 'myslice').filter_by('user_id', '==', user_id).set(account_params).select('user_id')
 203     results = execute_admin_query(request,query)
 204     return results
 205
 206 #explicitly mention the platform_id
 207 def manifold_delete_account(request, platform_id, user_id, account_params):
 208     query = Query.delete('local:account').filter_by('platform_id', '==', platform_id).filter_by('user_id', '==', user_id).set(account_params).select('user_id')
 209     results = execute_admin_query(request,query)
 210     return results
 211
 212
 213 #not tested
 214 def manifold_add_platform(request, platform_params):
 215     query = Query.create('local:platform').set(platform_params).select(['user', 'platform'])
 216     results = execute_admin_query(request,query)
 217     if not results:
 218         raise Exception, "Failed creating manifold platform %s for user: %s" % (platform_params['platform'], platform_params['user'])
 219     result, = results
 220     return result['platform_id']
 221
 222
 223 def make_request_user(user):
 224     request = {}
 225     request['type']          = 'user'
 226     request['id']            = user.id
 227     request['timestamp']     = user.created # XXX in DB ?
 228     request['authority_hrn'] = user.authority_hrn
 229     request['first_name']    = user.first_name
 230     request['last_name']     = user.last_name
 231     request['email']         = user.email
 232     request['login']         = user.login
 233     request['user_hrn']      = user.user_hrn
 234     request['public_key']    = user.public_key
 235     request['private_key']   = user.private_key
 236     request['username']      = user.login
 237     request['reasons']       = user.reasons
 238     return request
 239
 240 def make_request_slice(slice):
 241     request = {}
 242     request['type'] = 'slice'
 243     request['id'] = slice.id
 244     request['user_hrn'] = slice.user_hrn
 245     request['timestamp'] = slice.created
 246     request['authority_hrn'] = slice.authority_hrn
 247     request['slice_name'] = slice.slice_name
 248     request['number_of_nodes'] = slice.number_of_nodes
 249     request['type_of_nodes'] = slice.type_of_nodes
 250     request['purpose'] = slice.purpose
 251     return request
 252
 253 def make_request_authority(authority):
 254     request = {}
 255     request['type']                  = 'authority'
 256     request['id']                    = authority.id
 257     request['site_name']             = authority.site_name
 258     request['site_latitude']         = authority.site_latitude
 259     request['site_longitude']        = authority.site_longitude
 260     request['site_url']              = authority.site_url
 261     request['site_authority']        = authority.site_authority
 262     request['site_abbreviated_name'] = authority.site_abbreviated_name
 263     request['address_line1']         = authority.address_line1
 264     request['address_line2']         = authority.address_line2
 265     request['address_line3']         = authority.address_line3
 266     request['address_city']          = authority.address_city
 267     request['address_postalcode']    = authority.address_postalcode
 268     request['address_state']         = authority.address_state
 269     request['address_country']       = authority.address_country
 270     request['authority_hrn']         = authority.authority_hrn
 271     request['timestamp']             = authority.created
 272     return request
 273
 274 def make_requests(pending_users, pending_slices, pending_authorities):
 275     requests = []
 276     for user in pending_users:
 277         requests.append(make_request_user(user))
 278     for slice in pending_slices:
 279         requests.append(make_request_slice(slice))
 280     for authority in pending_authorities:
 281         requests.append(make_request_authority(authority))
 282     return requests
 283
 284 def get_request_by_id(ids):
 285     sorted_ids = { 'user': [], 'slice': [], 'authority': [] }
 286     for type__id in ids:
 287         type, id = type__id.split('__')
 288         sorted_ids[type].append(id)
 289
 290     if not ids:
 291         pending_users  = PendingUser.objects.all()
 292         pending_slices = PendingSlice.objects.all()
 293         pending_authorities = PendingAuthority.objects.all()
 294     else:
 295         pending_users  = PendingUser.objects.filter(id__in=sorted_ids['user']).all()
 296         pending_slices = PendingSlice.objects.filter(id__in=sorted_ids['slice']).all()
 297         pending_authorities = PendingAuthority.objects.filter(id__in=sorted_ids['authority']).all()
 298
 299     return make_requests(pending_users, pending_slices, pending_authorities)
 300
 301 def get_requests(authority_hrns=None):
 302     print "get_request_by_authority auth_hrns = ", authority_hrns
 303     if not authority_hrns:
 304         ## get those pending users who have confirmed their emails
 305         pending_users  = PendingUser.objects.filter(status__iexact = 'True')
 306         pending_slices = PendingSlice.objects.all()
 307         pending_authorities = PendingAuthority.objects.all()
 308     else:
 309         pending_users  = PendingUser.objects.filter(authority_hrn__in=authority_hrns).all()
 310         pending_slices = PendingSlice.objects.filter(authority_hrn__in=authority_hrns).all()
 311         pending_authorities = PendingAuthority.objects.filter(authority_hrn__in=authority_hrns).all()
 312
 313     return make_requests(pending_users, pending_slices, pending_authorities)
 314
 315 # XXX Is it in sync with the form fields ?
 316
 317 def portal_validate_request(wsgi_request, request_ids):
 318     status = {}
 319
 320     if not isinstance(request_ids, list):
 321         request_ids = [request_ids]
 322
 323     requests = get_request_by_id(request_ids)
 324     for request in requests:
 325         # type, id, timestamp, details, allowed -- MISSING: authority_hrn
 326         # CAREFUL about details
 327         # user  : first name, last name, email, password, keypair
 328         # slice : number of nodes, type of nodes, purpose
 329
 330         request_status = {}
 331
 332         if request['type'] == 'user':
 333
 334             try:
 335                 create_user(wsgi_request, request)
 336                 request_status['SFA user'] = {'status': True }
 337                 PendingUser.objects.get(id=request['id']).delete()
 338             except Exception, e:
 339                  request_status['SFA user'] = {'status': False, 'description': str(e)}
 340
 341 #            user_params = {'status':2}
 342 #            manifold_update_user(request, request['email'], user_params)
 343
 344             # MANIFOLD user should be added beforehand, during registration
 345             #try:
 346             #    manifold_user_params = { key: request[key] for key in MANIFOLD_USER_KEYS }
 347             #    # XXX # manifold_add_user(manifold_user_params)
 348             #    request_status['MySlice user'] = {'status': True }
 349             #except Exception, e:
 350             #    request_status['MySlice user'] = {'status': False, 'description': str(e)}
 351
 352             # XXX
 353             #manifold_account_params = { key: request[key] for key in MANIFOLD_ACCOUNT_KEYS }
 354             #manifold_add_account(manifold_account_params)
 355             #request_status['MySlice testbed accounts'] = {'status': False }
 356
 357         elif request['type'] == 'slice':
 358             try:
 359                 create_slice(wsgi_request, request)
 360                 request_status['SFA slice'] = {'status': True }
 361                 PendingSlice.objects.get(id=request['id']).delete()
 362
 363             except Exception, e:
 364                 request_status['SFA slice'] = {'status': False, 'description': str(e)}
 365
 366         elif request['type'] == 'authority':
 367             try:
 368                 #hrn = "%s.%s" % (request['authority_hrn'], request['site_authority'])
 369                 hrn = request['site_authority']
 370                 # XXX tmp sfa dependency
 371                 from sfa.util.xrn import Xrn
 372                 urn = Xrn(hrn, request['type']).get_urn()
 373
 374                 # Only hrn is required for Manifold Query
 375                 sfa_authority_params = {
 376                     'authority_hrn'        : hrn,
 377                     #'authority_urn'        : urn,
 378                     #'type'       : request['type'],
 379                     #'pi'        : None,
 380                     #'enabled'    : True
 381                 }
 382                 print "ADD Authority"
 383                 sfa_add_authority(wsgi_request, sfa_authority_params)
 384                 request_status['SFA authority'] = {'status': True }
 385                 PendingAuthority.objects.get(id=request['id']).delete()
 386
 387             except Exception, e:
 388                 request_status['SFA authority'] = {'status': False, 'description': str(e)}
 389
 390         # XXX Remove from Pendings in database
 391
 392         status['%s__%s' % (request['type'], request['id'])] = request_status
 393
 394     return status
 395
 396
 397 def validate_action(request, **kwargs):
 398     ids = filter(None, kwargs['id'].split('/'))
 399     status = portal_validate_request(request, ids)
 400     json_answer = json.dumps(status)
 401     return HttpResponse (json_answer, mimetype="application/json")
 402
 403 # Django and ajax
 404 # http://djangosnippets.org/snippets/942/
 405
 406
 407
 408 #-------------------------------------------------------------------------------
 409 # REQUESTS - Slices
 410 #-------------------------------------------------------------------------------
 411
 412 def create_slice(wsgi_request, request):
 413     """
 414     Arguments:
 415         wsgi_request (~ WSGIRequest) :
 416         request (dict) : the slice request in our own dict format
 417
 418     Raises:
 419         Exception
 420     """
 421     hrn = "%s.%s" % (request['authority_hrn'], request['slice_name'])
 422     # XXX tmp sfa dependency
 423     from sfa.util.xrn import Xrn
 424     urn = Xrn(hrn, request['type']).get_urn()
 425
 426     # Add User to Slice if we have the user_hrn in pendingslice table
 427     user_hrn = request.get('user_hrn', None)
 428     user_hrns = list([user_hrn]) if user_hrn else list()
 429
 430     user_email = request.get
 431
 432     # XXX We should create a slice with Manifold terminology
 433     slice_params = {
 434         'slice_hrn'        : hrn,
 435         'slice_urn'        : urn,
 436         'slice_type'       : request['type'],
 437         'users'            : user_hrns,
 438         'slice_enabled'    : True
 439     }
 440     # ignored in request: id, timestamp,  number_of_nodes, type_of_nodes, purpose
 441
 442     query = Query.create('slice').set(slice_params).select('slice_hrn')
 443     results = execute_query(wsgi_request, query)
 444     if not results:
 445         raise Exception, "Could not create %s. Already exists ?" % slice_params['hrn']
 446     ## We do not store the email in pendingslice table. As a result receiver's email is unknown ##
 447     ## Need modification in pendingslice table ###
 448     #else:
 449     #    subject = 'Slice created'
 450     #    msg = 'A manager of your institution has validated your slice request. You can now add resources to the slice and start experimenting.'
 451     #    send_mail(subject, msg, 'support@onelab.eu',['yasin.upmc@gmail.com'], fail_silently=False)
 452
 453     return results
 454
 455 def create_pending_slice(wsgi_request, request, email):
 456     """
 457     """
 458
 459     # Insert an entry in the PendingSlice table
 460     s = PendingSlice(
 461         slice_name      = request['slice_name'],
 462         user_hrn        = request['user_hrn'],
 463         authority_hrn   = request['authority_hrn'],
 464         number_of_nodes = request['exp_url'],
 465         purpose         = request['purpose'],
 466     )
 467     s.save()
 468
 469     try:
 470         # Send an email: the recipients are the PI of the authority
 471         recipients = authority_get_pi_emails(wsgi_request, request['authority_hrn'])
 472
 473         theme.template_name = 'slice_request_email.txt'
 474         text_content = render_to_string(theme.template, request)
 475
 476         theme.template_name = 'slice_request_email.html'
 477         html_content = render_to_string(theme.template, request)
 478
 479         theme.template_name = 'slice_request_email_subject.txt'
 480         subject = render_to_string(theme.template, request)
 481         subject = subject.replace('\n', '')
 482
 483         theme.template_name = 'email_default_sender.txt'
 484         sender =  render_to_string(theme.template, request)
 485         sender = sender.replace('\n', '')
 486
 487         #sender = email
 488         msg = EmailMultiAlternatives(subject, text_content, sender, recipients)
 489         msg.attach_alternative(html_content, "text/html")
 490         msg.send()
 491     except Exception, e:
 492         print "Failed to send email, please check the mail templates and the SMTP configuration of your server"
 493
 494 #-------------------------------------------------------------------------------
 495 # REQUESTS - Users
 496 #-------------------------------------------------------------------------------
 497
 498 def manifold_add_reference_user_accounts(wsgi_request, request):
 499     """When a new user is created, add reference accounts to the reference platform.
 500     """
 501     # XXX XXX XXX The rest of this function has to be checked XXX XXX XXX
 502
 503     # Retrieve user information
 504     user_query  = Query().get('local:user')             \
 505         .select('user_id', 'config', 'email', 'status') \
 506         .filter_by('email', '==', request['username'])
 507     user_details = execute_admin_query(wsgi_request, user_query)
 508
 509     # USER MAIN ACCOUNT != reference
 510     #print 'USER MAIN ACCOUNT != reference'
 511     list_accounts_query = Query().get('local:account')              \
 512         .select('user_id', 'platform_id', 'auth_type', 'config')    \
 513         .filter_by('user_id', '==', user_details[0]['user_id'])     \
 514         .filter_by('auth_type', '!=', 'reference')
 515     list_accounts = execute_admin_query(wsgi_request, list_accounts_query)
 516
 517     # XXX main_platform is being erased several times ???
 518     for account in list_accounts:
 519         main_platform_query = Query().get('local:platform')         \
 520             .select('platform_id', 'platform')                      \
 521             .filter_by('platform_id', '==', account['platform_id'])
 522         main_platform = execute_admin_query(wsgi_request, main_platform_query)
 523
 524     # Add reference accounts on SFA enabled platforms
 525     platforms_query = Query().get('local:platform') \
 526         .filter_by('disabled', '==', '0')           \
 527         .filter_by('gateway_type', '==', 'sfa')     \
 528         .select('platform_id', 'gateway_type')
 529     platforms = execute_admin_query(wsgi_request, platforms_query)
 530     for platform in platforms:
 531         #print "add reference to platform ",platform
 532         manifold_account_params = {
 533             'user_id'       : user_details[0]['user_id'],
 534             'platform_id'   : platform['platform_id'],
 535             'auth_type'     : 'reference',
 536             'config'        : '{"reference_platform": "' + main_platform[0]['platform'] + '"}',
 537         }
 538         manifold_add_account(wsgi_request, manifold_account_params)
 539
 540 def sfa_create_user(wsgi_request, request):
 541     """
 542     Arguments:
 543         wsgi_request (~ WSGIRequest) :
 544         request (dict) : the user request in our own dict format
 545
 546     Raises:
 547         Exception
 548     """
 549     from sfa.util.xrn import Xrn
 550
 551     auth_pi = request.get('pi', None)
 552     auth_pi = list([auth_pi]) if auth_pi else list()
 553
 554     # We create a user request with Manifold terminology
 555     sfa_user_params = {
 556         'user_hrn'          : request['user_hrn'],
 557         'user_email'        : request['email'],
 558         'user_urn'          : Xrn(request['user_hrn'], request['type']).get_urn(),
 559         'user_type'         : request['type'],
 560         'keys'              : request['public_key'],
 561         'user_first_name'   : request['first_name'],
 562         'user_last_name'    : request['last_name'],
 563         'pi_authorities'    : auth_pi,
 564         'user_enabled'      : True
 565     }
 566
 567     query = Query.create('user').set(sfa_user_params).select('user_hrn')
 568     results = execute_query(wsgi_request, query)
 569
 570     if not results:
 571         raise Exception, "Could not create %s. Already exists ?" % sfa_user_params['user_hrn']
 572     else:
 573         subject = 'User validated'
 574         msg = 'A manager of your institution has validated your account. You have now full user access to the portal.'
 575         send_mail(subject, msg, 'support@fibre.org.br',[request['email']], fail_silently=False)
 576     return results
 577
 578 def ls_create_user(wsgi_request, request, user_detail):
 579     organization = request['username'].split('@')[1]
 580     lsClient = LaboraSchedulerClient( organization )
 581
 582     orgGIDNumber = lsClient.get_testbed_info()['gidnumber']
 583     userHomeDirectory = "/home/" + organization + "/" + request['username'].split('@')[0]
 584     userHomeDirectory = userHomeDirectory.encode('utf-8')
 585
 586     userData = {
 587         'username'      : request['username'],
 588         'email'         : request['email'].encode('utf-8'),
 589         'password'      : request['password'].encode('utf-8'),
 590         'name'          : str( request['first_name'].encode('latin1') ) + ' ' + str( request['last_name'].encode('latin1') ),
 591         'gidnumber'     : orgGIDNumber,
 592         'homedirectory' : userHomeDirectory,
 593         'created_by'    : "myslice"
 594     }
 595
 596     # Add user in the island.
 597     addUser = lsClient.add_user( userData )
 598
 599     # User successfully created, upload user public key.
 600     if addUser:
 601         ls_update_public_key( wsgi_request, request, lsClient, addUser )
 602
 603     return addUser
 604
 605 def ls_validate_user(wsgi_request, request):
 606     organization = request['username'].split('@')[1]
 607     lsClient = LaboraSchedulerClient( organization )
 608
 609     userId = lsClient.get_user_id_by_username( { 'username': str( request['username'] ) } )
 610
 611     validate = False
 612     if userId:
 613         userData = {
 614             'user_id'       : userId,
 615             'new_user_data' : { 'enable': 'TRUE' }
 616         }
 617
 618         validate = lsClient.update_user( userData )
 619
 620     return validate and addUserPublicKey
 621
 622 def ls_update_public_key( wsgi_request, request, lsClient, userId ):
 623     userPbKey = {
 624         'user_id'       : userId,
 625         'public_key'    : request['public_key']
 626     }
 627
 628     addUserPublicKey = lsClient.add_user_public_key( userPbKey )
 629
 630     return addUserPublicKey
 631
 632 def create_user(wsgi_request, request):
 633
 634     # XXX This has to be stored centrally
 635     USER_STATUS_ENABLED = 2
 636
 637     # NOTE : if we were to create a user directly (just like we create slices,
 638     # we would have to perform the steps in create_pending_user too
 639
 640     # Edelberto - I put this more below
 641     # Add the user to the SFA registry
 642     #sfa_create_user(wsgi_request, request)
 643
 644     # Update Manifold user status
 645     manifold_update_user(wsgi_request, request['username'], {'status': USER_STATUS_ENABLED})
 646
 647     # Add reference accounts for platforms
 648     manifold_add_reference_user_accounts(wsgi_request, request)
 649
 650     # Add the user to the SFA registry
 651     sfa_create_user(wsgi_request, request)
 652
 653     # Validate the user using the LS API ( By Bruno - UFG ):
 654     try:
 655         ls_validate_user( wsgi_request, request )
 656     except Exception, e:
 657         "Error to validate the user in Labora Scheduler."
 658
 659 def create_user_in_ldap(wsgi_request, request, user_detail):
 660     """
 661     """
 662
 663     # saves the user to django auth_user table [needed for password reset]
 664     user = User.objects.create_user(request['username'], request['email'], request['password'])
 665
 666     # Creating a manifold user
 667     user_id = manifold_add_user(wsgi_request, request)
 668
 669     # Creating a Manifold account on the MySlice platform
 670     # Note the JSON representation of public and private keys already includes quotes
 671     account_config = {
 672         'user_hrn'          : request['user_hrn'],
 673         'user_public_key'   : request['public_key'],
 674     }
 675     if request['private_key']:
 676         account_config['user_private_key'] = request['private_key']
 677
 678     user_id = user_detail['user_id'] + 1 # the user_id for the newly created user in local:user
 679
 680     # XXX TODO: Require a myslice platform
 681     # ALERT: this will disapear with ROUTERV2 of Manifold
 682     # We have to consider the case where several registries can be used
 683     # Removed hardcoded platform = 5
 684     # This platform == 'myslice' is a TMP FIX !!
 685     try:
 686         reg_platform_query = Query().get('local:platform') \
 687             .filter_by('platform', '==', 'myslice')           \
 688             .select('platform_id')
 689         reg_platform = execute_admin_query(wsgi_request, reg_platform_query)
 690         reg_platform_id = reg_platform[0]['platform_id']
 691         account_params = {
 692             'platform_id'   : reg_platform_id, # XXX ALERT !!
 693             'user_id'       : user_id,
 694             'auth_type'     : request['auth_type'],
 695             'config'        : json.dumps(account_config),
 696         }
 697         manifold_add_account(wsgi_request, account_params)
 698     except Exception, e:
 699        print "Failed creating manifold account on platform %s for user: %s" % ('myslice', request['email'])
 700
 701     # XXX This has to be stored centrally
 702     USER_STATUS_ENABLED = 2
 703
 704     # Update Manifold user status
 705     manifold_update_user(wsgi_request, request['username'], {'status': USER_STATUS_ENABLED})
 706
 707     # Add reference accounts for platforms
 708     manifold_add_reference_user_accounts(wsgi_request, request)
 709
 710     organization = request['username'].split('@')[1]
 711     lsClient = LaboraSchedulerClient( organization )
 712
 713     userId = lsClient.get_user_id_by_username( { 'username': str( request['username'] ) } )
 714
 715     ls_up_pkey = ls_update_public_key( wsgi_request, request, lsClient, userId )
 716
 717     if ls_up_pkey:
 718         print "OK PKEY"
 719
 720     from sfa.util.xrn import Xrn
 721
 722     auth_pi = request.get('pi', None)
 723     auth_pi = list([auth_pi]) if auth_pi else list()
 724
 725     # We create a user request with Manifold terminology
 726     sfa_user_params = {
 727         'user_hrn'          : request['user_hrn'],
 728         'user_email'        : request['email'],
 729         'user_urn'          : Xrn(request['user_hrn'], request['type']).get_urn(),
 730         'user_type'         : request['type'],
 731         'keys'              : request['public_key'],
 732         'user_first_name'   : request['first_name'],
 733         'user_last_name'    : request['last_name'],
 734         'pi_authorities'    : auth_pi,
 735         'user_enabled'      : True
 736     }
 737
 738     print request['user_hrn']
 739     print request['email']
 740     print request['first_name']
 741     print request['last_name']
 742     print request['type']
 743     print request['public_key']
 744
 745     query = Query.create('user').set(sfa_user_params).select('user_hrn')
 746
 747     print query
 748
 749     results = execute_admin_query(wsgi_request, query)
 750
 751     print results
 752
 753     if not results:
 754         raise Exception, "Could not create %s. Already exists ?" % sfa_user_params['user_hrn']
 755     else:
 756         subject = 'User validated'
 757         msg = 'A manager of your institution has validated your account. You have now full user access to the portal.'
 758         send_mail(subject, msg, 'support@fibre.org.br',[request['email']], fail_silently=False)
 759     return results
 760
 761 def create_pending_user(wsgi_request, request, user_detail):
 762     """
 763     """
 764
 765     # Insert an entry in the PendingUser table
 766     b = PendingUser(
 767         first_name    = request['first_name'],
 768         last_name     = request['last_name'],
 769         authority_hrn = request['authority_hrn'],
 770         email         = request['email'],
 771         login         = request['username'],
 772         password      = request['password'],
 773         public_key    = request['public_key'],
 774         private_key   = request['private_key'],
 775         user_hrn      = request['user_hrn'],
 776         pi            = request['pi'],
 777         email_hash    = request['email_hash'],
 778         reasons       = request['reasons'],
 779         status        = 'False',
 780     )
 781     b.save()
 782
 783     # sends email to user to activate the email
 784     theme.template_name = 'activate_user.html'
 785     html_content = render_to_string(theme.template, request)
 786     theme.template_name = 'activate_user.txt'
 787     text_content = render_to_string(theme.template, request)
 788     theme.template_name = 'activate_user_email_subject.txt'
 789     subject = render_to_string(theme.template, request)
 790     subject = subject.replace('\n', '')
 791     #sender = 'support@myslice.info'
 792     theme.template_name = 'email_default_sender.txt'
 793     sender =  render_to_string(theme.template, request)
 794     sender = sender.replace('\n', '')
 795     recipient = [request['email']]
 796     #recipient = recipient.append(request['email'])
 797
 798     msg = EmailMultiAlternatives(subject, text_content, sender, recipient)
 799     msg.attach_alternative(html_content, "text/html")
 800     msg.send()
 801
 802     # saves the user to django auth_user table [needed for password reset]
 803     user = User.objects.create_user(request['username'], request['email'], request['password'])
 804
 805     # Creating a manifold user
 806     user_id = manifold_add_user(wsgi_request, request)
 807
 808     # Creating a Manifold account on the MySlice platform
 809     # Note the JSON representation of public and private keys already includes quotes
 810     account_config = {
 811         'user_hrn'          : request['user_hrn'],
 812         'user_public_key'   : request['public_key'],
 813     }
 814     if request['private_key']:
 815         account_config['user_private_key'] = request['private_key']
 816
 817     user_id = user_detail['user_id'] + 1 # the user_id for the newly created user in local:user
 818
 819     # XXX TODO: Require a myslice platform
 820     # ALERT: this will disapear with ROUTERV2 of Manifold
 821     # We have to consider the case where several registries can be used
 822     # Removed hardcoded platform = 5
 823     # This platform == 'myslice' is a TMP FIX !!
 824     try:
 825         reg_platform_query = Query().get('local:platform') \
 826             .filter_by('platform', '==', 'myslice')           \
 827             .select('platform_id')
 828         reg_platform = execute_admin_query(wsgi_request, reg_platform_query)
 829         reg_platform_id = reg_platform[0]['platform_id']
 830         account_params = {
 831             'platform_id'   : reg_platform_id, # XXX ALERT !!
 832             'user_id'       : user_id,
 833             'auth_type'     : request['auth_type'],
 834             'config'        : json.dumps(account_config),
 835         }
 836         manifold_add_account(wsgi_request, account_params)
 837     except Exception, e:
 838        print "Failed creating manifold account on platform %s for user: %s" % ('myslice', request['email'])
 839
 840     # Add user to island using LS API ( By Bruno - UFG )
 841     ls_user_create = ls_create_user( wsgi_request, request, user_detail )
 842
 843     try:
 844         # Send an email: the recipients are the PI of the authority
 845         # If No PI is defined for this Authority, send to a default email (different for each theme)
 846
 847         split_authority_hrn = request['authority_hrn'].split(".")[0]
 848
 849         recipients = authority_get_pi_emails(wsgi_request, split_authority_hrn)
 850
 851         pis = authority_get_pis(request, split_authority_hrn)
 852         pi_emails = []
 853         for x in pis:
 854             for e in x['pi_users']:
 855                 try:
 856                     u = e.split(".")[1]
 857                     y = User.objects.get(username = u)
 858                     if y.username.count("@") != 0:
 859                         if y.username.split("@")[1] == request['username'].split("@")[1]:
 860                             pi_emails += [y.email]
 861                 except:
 862                     print "fail"
 863
 864         theme.template_name = 'user_request_email.html'
 865         html_content = render_to_string(theme.template, request)
 866
 867         theme.template_name = 'user_request_email.txt'
 868         text_content = render_to_string(theme.template, request)
 869
 870         theme.template_name = 'user_request_email_subject.txt'
 871         subject = render_to_string(theme.template, request)
 872         subject = subject.replace('\n', '')
 873
 874         theme.template_name = 'email_default_sender.txt'
 875         sender =  render_to_string(theme.template, request)
 876         sender = sender.replace('\n', '')
 877
 878         msg = EmailMultiAlternatives(subject, text_content, sender, pi_emails)
 879
 880         msg.attach_alternative(html_content, "text/html")
 881         msg.send()
 882         print pi_emails
 883     except Exception, e:
 884         print "Failed to send email, please check the mail templates and the SMTP configuration of your server"
 885         import traceback
 886         traceback.print_exc()