PI only sees slices/users of your own institution
[myslice.git] / portal / actions.py
1 from django.http                import HttpResponse
2 from manifold.core.query        import Query
3 from manifoldapi.manifoldapi    import execute_query,execute_admin_query
4 from portal.models              import PendingUser, PendingSlice, PendingAuthority
5 import json
6
7 from django.contrib.auth.models import User
8 from django.template.loader     import render_to_string
9 from django.core.mail           import EmailMultiAlternatives, send_mail
10
11 from myslice.theme              import ThemeView
12
13 # LS Client - By Bruno Soares (UFG)
14 from lsapiclient                import LaboraSchedulerClient
15
16 theme = ThemeView()
17
18 # Thierry: moving this right into the code so 
19 # most people can use myslice without having to install sfa
20 # XXX tmp sfa dependency, should be moved to SFA gateway
21 #from sfa.util.xrn                import Xrn 
22
23
24 # Get the list of authorities
25
26 def authority_get_pis(request, authority_hrn):
27     query = Query.get('authority').filter_by('authority_hrn', '==', authority_hrn).select('pi_users')
28     results = execute_admin_query(request, query)
29     print "authority_get_pis = %s" % results
30     # NOTE: temporarily commented. Because results is giving empty list. 
31     # Needs more debugging
32     #if not results:
33     #    raise Exception, "Authority not found: %s" % authority_hrn
34     #result, = results
35     #return result['pi_users']
36     return results
37
38 def authority_get_pi_emails(request, authority_hrn):
39     pi_users = authority_get_pis(request,authority_hrn)
40     print "pi_users = %s" % pi_users
41
42     if any(pi['pi_users'] == None or not pi['pi_users']  for pi in pi_users):
43         #theme.template_name = 'email_default_recipients.txt' 
44         #default_email = render_to_string(theme.template, request)
45         #default_email = default_email.replace('\n', '')
46         #return default_email
47         # the above doesn't work
48         return ['support@myslice.info']
49     else:
50         pi_user_hrns = [ hrn for x in pi_users for hrn in x['pi_users'] ]
51         query = Query.get('user').filter_by('user_hrn', 'included', pi_user_hrns).select('user_email')
52         results = execute_admin_query(request, query)
53         return [result['user_email'] for result in results]
54
55 #clear user credentials
56 def clear_user_creds(request, user_email):
57     try:
58         user_query  = Query().get('local:user').filter_by('email', '==', user_email).select('user_id','email','password','config')
59         user_details = execute_admin_query(request, user_query)
60
61         # getting the user_id from the session
62         for user_detail in user_details:
63             user_id = user_detail['user_id']
64             user_email = user_detail['email']
65     
66         account_query  = Query().get('local:account').filter_by('user_id', '==', user_id).select('user_id','platform_id','auth_type','config')
67         account_details = execute_admin_query(request, account_query)
68     
69         platform_query  = Query().get('local:platform').select('platform_id','platform')
70         platform_details = execute_admin_query(request, platform_query)
71     
72         for account_detail in account_details:
73             for platform_detail in platform_details:
74                 if platform_detail['platform_id'] == account_detail['platform_id']:
75                     if 'myslice' in platform_detail['platform']:
76                         account_config = json.loads(account_detail['config'])
77                         user_cred = account_config.get('delegated_user_credential','N/A')
78                         if 'N/A' not in user_cred:
79                             user_hrn = account_config.get('user_hrn','N/A')
80                             user_pub_key = json.dumps(account_config.get('user_public_key','N/A'))
81                             user_priv_key = json.dumps(account_config.get('user_private_key','N/A'))
82                             updated_config = '{"user_public_key":'+ user_pub_key + ', "user_private_key":'+ user_priv_key + ', "user_hrn":"'+ user_hrn + '"}'
83                             user_params = { 'config': updated_config}
84                             manifold_update_account(request, user_id,user_params)
85                             return user_email
86                         else:
87                             return None
88
89     except Exception,e:
90         print "Exception in actions.py in clear_user_creds %s" % e
91         return None
92
93 def is_pi(wsgi_request, user_hrn, authority_hrn):
94     # XXX could be done in a single query !
95
96     # select pi_authorities from user where user_hrn == "ple.upmc.jordan_auge"
97     query = Query.get('user').filter_by('user_hrn', '==', user_hrn).select('pi_authorities')
98     results = execute_admin_query(wsgi_request, query)
99     if not results:
100         # XXX Warning ?
101         return False
102     result = results[0]
103     user_authority_hrns = result.get('pi_authorities', [])
104     return authority_hrn in user_authority_hrns
105     
106 # SFA get record
107
108 def sfa_get_user(request, user_hrn, pub):
109     query_sfa_user = Query.get('user').filter_by('user_hrn', '==', user_hrn)
110     result_sfa_user = execute_query(request, query_sfa_user)
111     return result_sfa_user                        
112
113 def sfa_update_user(request, user_hrn, user_params):
114     # user_params: keys [public_key] 
115     if 'email' in user_params:
116         user_params['user_email'] = user_params['email']
117     query = Query.update('user').filter_by('user_hrn', '==', user_hrn).set(user_params).select('user_hrn')
118     results = execute_query(request,query)
119     return results
120
121 def sfa_add_authority(request, authority_params):
122     query = Query.create('authority').set(authority_params).select('authority_hrn')
123     results = execute_query(request, query)
124     print "sfa_add_auth results=",results
125     if not results:
126         raise Exception, "Could not create %s. Already exists ?" % authority_params['hrn']
127     return results
128
129 def sfa_add_user_to_slice(request, user_hrn, slice_params):
130 # UPDATE myslice:slice SET researcher=['ple.upmc.jordan_auge','ple.inria.thierry_parmentelat','ple.upmc.loic_baron','ple.upmc.ciro_scognamiglio','ple.upmc.mohammed-yasin_rahman','ple.upmc.azerty'] where slice_hrn=='ple.upmc.myslicedemo'
131     query_current_users = Query.get('slice').select('user').filter_by('slice_hrn','==',slice_params['hrn'])
132     results_current_users = execute_query(request, query_current_users)
133     slice_params['researcher'] = slice_params['researcher'] | results_current_users
134     query = Query.update('slice').filter_by('user_hrn', '==', user_hrn).set(slice_params).select('slice_hrn')
135     results = execute_query(request, query)
136 # Also possible but not supported yet
137 # UPDATE myslice:user SET slice=['ple.upmc.agent','ple.upmc.myslicedemo','ple.upmc.tophat'] where user_hrn=='ple.upmc.azerty'
138     if not results:
139         raise Exception, "Could not create %s. Already exists ?" % slice_params['hrn']
140     return results
141
142 # Propose hrn
143
144 def manifold_add_user(wsgi_request, request):
145     """Add a Manifold user corresponding to a user request.
146
147     Args:
148         wsgi_request: a WSGIRequest instance
149         request (dict): a dictionary containing the user request built from the
150             form.
151
152     Returns:
153         The user_id of the inserted user.
154
155     Raises:
156         ?
157     
158     """
159
160     authority_hrn = request['authority_hrn']
161     request['authority_hrn'] = authority_hrn.split(".")[0]
162
163     USER_CONFIG = '{"firstname": "%(first_name)s", "lastname": "%(last_name)s", "authority": "%(authority_hrn)s"}'
164
165     user_params = {
166         'email'     : request['username'],
167         'password'  : request['password'],
168         'config'    : USER_CONFIG % request,
169         'status'    : 1
170     }
171
172     request['authority_hrn'] = authority_hrn
173
174     query = Query.create('local:user').set(user_params).select('email')
175     results = execute_admin_query(request, query)
176     if not results:
177         raise Exception, "Failed creating manifold user: %s" % user_params['email']
178     result = results[0]
179     return result['email']
180
181 def manifold_update_user(request, email, user_params):
182     # user_params: password, config e.g., 
183     query = Query.update('local:user').filter_by('email', '==', email).set(user_params).select('email')
184     results = execute_admin_query(request,query)
185     # NOTE: results remains empty and goes to Exception. However, it updates the manifold DB.
186     # That's why I commented the exception part. -- Yasin 
187     #if not results:
188     #    raise Exception, "Failed updating manifold user: %s" % user_params['email']
189     #result, = results
190     return results
191
192 def manifold_add_account(request, account_params):
193     query = Query.create('local:account').set(account_params).select(['user', 'platform'])
194     results = execute_admin_query(request,query)
195     if not results:
196         raise Exception, "Failed creating manifold account on platform %s for user: %s" % (account_params['platform'], account_params['user'])
197     result, = results
198     return result['user_id']
199
200 def manifold_update_account(request,user_id,account_params):
201     # account_params: config
202     query = Query.update('local:account').filter_by('platform', '==', 'myslice').filter_by('user_id', '==', user_id).set(account_params).select('user_id')
203     results = execute_admin_query(request,query)
204     return results
205
206 #explicitly mention the platform_id
207 def manifold_delete_account(request, platform_id, user_id, account_params):
208     query = Query.delete('local:account').filter_by('platform_id', '==', platform_id).filter_by('user_id', '==', user_id).set(account_params).select('user_id')
209     results = execute_admin_query(request,query)
210     return results
211
212
213 #not tested
214 def manifold_add_platform(request, platform_params):
215     query = Query.create('local:platform').set(platform_params).select(['user', 'platform'])
216     results = execute_admin_query(request,query)
217     if not results:
218         raise Exception, "Failed creating manifold platform %s for user: %s" % (platform_params['platform'], platform_params['user'])
219     result, = results
220     return result['platform_id']
221
222
223 def make_request_user(user):
224     request = {}
225     request['type']          = 'user'
226     request['id']            = user.id
227     request['timestamp']     = user.created # XXX in DB ?
228     request['authority_hrn'] = user.authority_hrn
229     request['first_name']    = user.first_name
230     request['last_name']     = user.last_name
231     request['email']         = user.email
232     request['login']         = user.login
233     request['user_hrn']      = user.user_hrn
234     request['public_key']    = user.public_key
235     request['private_key']   = user.private_key
236     request['username']      = user.login
237     request['reasons']       = user.reasons
238     return request
239
240 def make_request_slice(slice):
241     request = {}
242     request['type'] = 'slice'
243     request['id'] = slice.id
244     request['user_hrn'] = slice.user_hrn
245     request['timestamp'] = slice.created
246     request['authority_hrn'] = slice.authority_hrn
247     request['slice_name'] = slice.slice_name
248     request['number_of_nodes'] = slice.number_of_nodes
249     request['type_of_nodes'] = slice.type_of_nodes
250     request['purpose'] = slice.purpose
251     return request
252
253 def make_request_authority(authority):
254     request = {}
255     request['type']                  = 'authority'
256     request['id']                    = authority.id
257     request['site_name']             = authority.site_name
258     request['site_latitude']         = authority.site_latitude
259     request['site_longitude']        = authority.site_longitude
260     request['site_url']              = authority.site_url
261     request['site_authority']        = authority.site_authority
262     request['site_abbreviated_name'] = authority.site_abbreviated_name
263     request['address_line1']         = authority.address_line1
264     request['address_line2']         = authority.address_line2
265     request['address_line3']         = authority.address_line3
266     request['address_city']          = authority.address_city
267     request['address_postalcode']    = authority.address_postalcode
268     request['address_state']         = authority.address_state
269     request['address_country']       = authority.address_country
270     request['authority_hrn']         = authority.authority_hrn
271     request['timestamp']             = authority.created
272     return request
273
274 def make_requests(pending_users, pending_slices, pending_authorities):
275     requests = []
276     for user in pending_users:
277         requests.append(make_request_user(user))
278     for slice in pending_slices:
279         requests.append(make_request_slice(slice))
280     for authority in pending_authorities:
281         requests.append(make_request_authority(authority))
282     return requests   
283
284 def get_request_by_id(ids):
285     sorted_ids = { 'user': [], 'slice': [], 'authority': [] }
286     for type__id in ids:
287         type, id = type__id.split('__')
288         sorted_ids[type].append(id)
289         
290     if not ids:
291         pending_users  = PendingUser.objects.all()
292         pending_slices = PendingSlice.objects.all()
293         pending_authorities = PendingAuthority.objects.all()
294     else:
295         pending_users  = PendingUser.objects.filter(id__in=sorted_ids['user']).all()
296         pending_slices = PendingSlice.objects.filter(id__in=sorted_ids['slice']).all()
297         pending_authorities = PendingAuthority.objects.filter(id__in=sorted_ids['authority']).all()
298
299     return make_requests(pending_users, pending_slices, pending_authorities)
300
301 def get_requests(authority_hrns=None):
302     print "get_request_by_authority auth_hrns = ", authority_hrns
303     if not authority_hrns:
304         ## get those pending users who have confirmed their emails
305         pending_users  = PendingUser.objects.filter(status__iexact = 'True')
306         pending_slices = PendingSlice.objects.all()
307         pending_authorities = PendingAuthority.objects.all()
308     else:
309         pending_users  = PendingUser.objects.filter(authority_hrn__in=authority_hrns).all()
310         pending_slices = PendingSlice.objects.filter(authority_hrn__in=authority_hrns).all()
311         pending_authorities = PendingAuthority.objects.filter(authority_hrn__in=authority_hrns).all()
312
313     return make_requests(pending_users, pending_slices, pending_authorities)
314
315 # XXX Is it in sync with the form fields ?
316
317 def portal_validate_request(wsgi_request, request_ids):
318     status = {}
319
320     if not isinstance(request_ids, list):
321         request_ids = [request_ids]
322
323     requests = get_request_by_id(request_ids)
324     for request in requests:
325         # type, id, timestamp, details, allowed -- MISSING: authority_hrn
326         # CAREFUL about details
327         # user  : first name, last name, email, password, keypair
328         # slice : number of nodes, type of nodes, purpose
329         
330         request_status = {}
331
332         if request['type'] == 'user':
333
334             try:
335                 create_user(wsgi_request, request)
336                 request_status['SFA user'] = {'status': True }
337                 PendingUser.objects.get(id=request['id']).delete()
338             except Exception, e:
339                  request_status['SFA user'] = {'status': False, 'description': str(e)}
340                        
341 #            user_params = {'status':2}
342 #            manifold_update_user(request, request['email'], user_params)
343
344             # MANIFOLD user should be added beforehand, during registration
345             #try:
346             #    manifold_user_params = { key: request[key] for key in MANIFOLD_USER_KEYS }
347             #    # XXX # manifold_add_user(manifold_user_params)
348             #    request_status['MySlice user'] = {'status': True }
349             #except Exception, e:
350             #    request_status['MySlice user'] = {'status': False, 'description': str(e)}
351
352             # XXX
353             #manifold_account_params = { key: request[key] for key in MANIFOLD_ACCOUNT_KEYS }
354             #manifold_add_account(manifold_account_params)
355             #request_status['MySlice testbed accounts'] = {'status': False }
356
357         elif request['type'] == 'slice':
358             try:
359                 create_slice(wsgi_request, request)
360                 request_status['SFA slice'] = {'status': True }
361                 PendingSlice.objects.get(id=request['id']).delete()
362
363             except Exception, e:
364                 request_status['SFA slice'] = {'status': False, 'description': str(e)}
365
366         elif request['type'] == 'authority':
367             try:
368                 #hrn = "%s.%s" % (request['authority_hrn'], request['site_authority'])
369                 hrn = request['site_authority']
370                 # XXX tmp sfa dependency
371                 from sfa.util.xrn import Xrn 
372                 urn = Xrn(hrn, request['type']).get_urn()
373                 
374                 # Only hrn is required for Manifold Query 
375                 sfa_authority_params = {
376                     'authority_hrn'        : hrn,
377                     #'authority_urn'        : urn,
378                     #'type'       : request['type'],
379                     #'pi'        : None,
380                     #'enabled'    : True
381                 }
382                 print "ADD Authority"
383                 sfa_add_authority(wsgi_request, sfa_authority_params)
384                 request_status['SFA authority'] = {'status': True }
385                 PendingAuthority.objects.get(id=request['id']).delete()
386
387             except Exception, e:
388                 request_status['SFA authority'] = {'status': False, 'description': str(e)}
389
390         # XXX Remove from Pendings in database
391
392         status['%s__%s' % (request['type'], request['id'])] = request_status
393
394     return status
395
396
397 def validate_action(request, **kwargs):
398     ids = filter(None, kwargs['id'].split('/'))
399     status = portal_validate_request(request, ids)
400     json_answer = json.dumps(status)
401     return HttpResponse (json_answer, mimetype="application/json")
402
403 # Django and ajax
404 # http://djangosnippets.org/snippets/942/
405
406
407
408 #-------------------------------------------------------------------------------
409 # REQUESTS - Slices
410 #-------------------------------------------------------------------------------
411
412 def create_slice(wsgi_request, request):
413     """
414     Arguments:
415         wsgi_request (~ WSGIRequest) : 
416         request (dict) : the slice request in our own dict format
417
418     Raises:
419         Exception
420     """
421     hrn = "%s.%s" % (request['authority_hrn'], request['slice_name'])
422     # XXX tmp sfa dependency
423     from sfa.util.xrn import Xrn 
424     urn = Xrn(hrn, request['type']).get_urn()
425     
426     # Add User to Slice if we have the user_hrn in pendingslice table
427     user_hrn = request.get('user_hrn', None)
428     user_hrns = list([user_hrn]) if user_hrn else list()
429     
430     user_email = request.get
431
432     # XXX We should create a slice with Manifold terminology
433     slice_params = {
434         'slice_hrn'        : hrn, 
435         'slice_urn'        : urn,
436         'slice_type'       : request['type'],
437         'users'            : user_hrns,
438         'slice_enabled'    : True
439     }
440     # ignored in request: id, timestamp,  number_of_nodes, type_of_nodes, purpose
441
442     query = Query.create('slice').set(slice_params).select('slice_hrn')
443     results = execute_query(wsgi_request, query)
444     if not results:
445         raise Exception, "Could not create %s. Already exists ?" % slice_params['hrn']
446     ## We do not store the email in pendingslice table. As a result receiver's email is unknown ##
447     ## Need modification in pendingslice table ###
448     #else:
449     #    subject = 'Slice created'
450     #    msg = 'A manager of your institution has validated your slice request. You can now add resources to the slice and start experimenting.'
451     #    send_mail(subject, msg, 'support@onelab.eu',['yasin.upmc@gmail.com'], fail_silently=False)
452        
453     return results
454
455 def create_pending_slice(wsgi_request, request, email):
456     """
457     """
458
459     # Insert an entry in the PendingSlice table
460     s = PendingSlice(
461         slice_name      = request['slice_name'],
462         user_hrn        = request['user_hrn'],
463         authority_hrn   = request['authority_hrn'],
464         number_of_nodes = request['exp_url'],
465         purpose         = request['purpose'],
466     )
467     s.save()
468
469     try:
470         # Send an email: the recipients are the PI of the authority
471         recipients = authority_get_pi_emails(wsgi_request, request['authority_hrn'])
472         
473         pis = authority_get_pis(request, request['authority_hrn'])
474         pi_emails = []
475         for x in pis:
476             for e in x['pi_users']:
477                 try:
478                     u = e.split(".")[1]
479                     y = User.objects.get(username = u)
480                     print y.username
481                     if y.username.count("@") != 0:
482                         if y.username.split("@")[1] == request['user_hrn'].split("@")[1]:
483                             pi_emails += [y.email]
484                             print y.email
485                 except:
486                     print "fail"
487
488         theme.template_name = 'slice_request_email.txt' 
489         text_content = render_to_string(theme.template, request)
490     
491         theme.template_name = 'slice_request_email.html' 
492         html_content = render_to_string(theme.template, request)
493     
494         theme.template_name = 'slice_request_email_subject.txt'
495         subject = render_to_string(theme.template, request)
496         subject = subject.replace('\n', '')
497     
498         theme.template_name = 'email_default_sender.txt'
499         sender =  render_to_string(theme.template, request)
500         sender = sender.replace('\n', '')
501
502         #sender = email
503         msg = EmailMultiAlternatives(subject, text_content, sender, pi_emails)
504         msg.attach_alternative(html_content, "text/html")
505         msg.send()
506     except Exception, e:
507         print "Failed to send email, please check the mail templates and the SMTP configuration of your server"
508
509 #-------------------------------------------------------------------------------
510 # REQUESTS - Users
511 #-------------------------------------------------------------------------------
512
513 def manifold_add_reference_user_accounts(wsgi_request, request):
514     """When a new user is created, add reference accounts to the reference platform.
515     """
516     # XXX XXX XXX The rest of this function has to be checked XXX XXX XXX
517
518     # Retrieve user information
519     user_query  = Query().get('local:user')             \
520         .select('user_id', 'config', 'email', 'status') \
521         .filter_by('email', '==', request['username'])
522     user_details = execute_admin_query(wsgi_request, user_query)
523
524     # USER MAIN ACCOUNT != reference
525     #print 'USER MAIN ACCOUNT != reference'
526     list_accounts_query = Query().get('local:account')              \
527         .select('user_id', 'platform_id', 'auth_type', 'config')    \
528         .filter_by('user_id', '==', user_details[0]['user_id'])     \
529         .filter_by('auth_type', '!=', 'reference')
530     list_accounts = execute_admin_query(wsgi_request, list_accounts_query)
531
532     # XXX main_platform is being erased several times ???
533     for account in list_accounts:
534         main_platform_query = Query().get('local:platform')         \
535             .select('platform_id', 'platform')                      \
536             .filter_by('platform_id', '==', account['platform_id'])
537         main_platform = execute_admin_query(wsgi_request, main_platform_query)
538
539     # Add reference accounts on SFA enabled platforms
540     platforms_query = Query().get('local:platform') \
541         .filter_by('disabled', '==', '0')           \
542         .filter_by('gateway_type', '==', 'sfa')     \
543         .select('platform_id', 'gateway_type')
544     platforms = execute_admin_query(wsgi_request, platforms_query)
545     for platform in platforms:
546         #print "add reference to platform ",platform
547         manifold_account_params = {
548             'user_id'       : user_details[0]['user_id'],
549             'platform_id'   : platform['platform_id'],
550             'auth_type'     : 'reference',
551             'config'        : '{"reference_platform": "' + main_platform[0]['platform'] + '"}',
552         }
553         manifold_add_account(wsgi_request, manifold_account_params)
554
555 def sfa_create_user(wsgi_request, request):
556     """
557     Arguments:
558         wsgi_request (~ WSGIRequest) : 
559         request (dict) : the user request in our own dict format
560
561     Raises:
562         Exception
563     """
564     from sfa.util.xrn import Xrn 
565
566     auth_pi = request.get('pi', None)
567     auth_pi = list([auth_pi]) if auth_pi else list()
568
569     # We create a user request with Manifold terminology
570     sfa_user_params = {
571         'user_hrn'          : request['user_hrn'],
572         'user_email'        : request['email'],
573         'user_urn'          : Xrn(request['user_hrn'], request['type']).get_urn(),
574         'user_type'         : request['type'],
575         'keys'              : request['public_key'],
576         'user_first_name'   : request['first_name'],
577         'user_last_name'    : request['last_name'],
578         'pi_authorities'    : auth_pi,
579         'user_enabled'      : True
580     }
581
582     query = Query.create('user').set(sfa_user_params).select('user_hrn')
583     results = execute_query(wsgi_request, query)
584
585     if not results:
586         raise Exception, "Could not create %s. Already exists ?" % sfa_user_params['user_hrn']
587     else:
588         subject = 'User validated'
589         msg = 'A manager of your institution has validated your account. You have now full user access to the portal.'
590         send_mail(subject, msg, 'support@fibre.org.br',[request['email']], fail_silently=False)       
591     return results
592
593 def ls_create_user(wsgi_request, request, user_detail):
594     organization = request['username'].split('@')[1]
595     lsClient = LaboraSchedulerClient( organization )
596
597     orgGIDNumber = lsClient.get_testbed_info()['gidnumber']
598     userHomeDirectory = "/home/" + organization + "/" + request['username'].split('@')[0]
599     userHomeDirectory = userHomeDirectory.encode('utf-8')
600     
601     userData = {
602         'username'      : request['username'],
603         'email'         : request['email'].encode('utf-8'),
604         'password'      : request['password'].encode('utf-8'),
605         'name'          : str( request['first_name'].encode('latin1') ) + ' ' + str( request['last_name'].encode('latin1') ),
606         'gidnumber'     : orgGIDNumber,
607         'homedirectory' : userHomeDirectory,
608         'created_by'    : "myslice"
609     }
610     
611     # Add user in the island.
612     addUser = lsClient.add_user( userData )
613     
614     # User successfully created, upload user public key.
615     if addUser:
616         ls_update_public_key( wsgi_request, request, lsClient, addUser )
617     
618     return addUser
619
620 def ls_validate_user(wsgi_request, request):
621     organization = request['username'].split('@')[1]
622     lsClient = LaboraSchedulerClient( organization )
623     
624     userId = lsClient.get_user_id_by_username( { 'username': str( request['username'] ) } )
625     
626     validate = False
627     if userId:
628         userData = {
629             'user_id'       : userId,
630             'new_user_data' : { 'enable': 'TRUE' }
631         }
632         
633         validate = lsClient.update_user( userData )
634         
635     return validate and addUserPublicKey
636
637 def ls_update_public_key( wsgi_request, request, lsClient, userId ):
638     userPbKey = {
639         'user_id'       : userId,
640         'public_key'    : request['public_key']
641     }
642     
643     addUserPublicKey = lsClient.add_user_public_key( userPbKey )
644     
645     return addUserPublicKey
646
647 def create_user(wsgi_request, request):
648     
649     # XXX This has to be stored centrally
650     USER_STATUS_ENABLED = 2
651
652     # NOTE : if we were to create a user directly (just like we create slices,
653     # we would have to perform the steps in create_pending_user too
654     
655     # Edelberto - I put this more below
656     # Add the user to the SFA registry
657     #sfa_create_user(wsgi_request, request)
658
659     # Update Manifold user status
660     manifold_update_user(wsgi_request, request['username'], {'status': USER_STATUS_ENABLED})
661
662     # Add reference accounts for platforms
663     manifold_add_reference_user_accounts(wsgi_request, request)
664     
665     # Add the user to the SFA registry
666     sfa_create_user(wsgi_request, request)
667   
668     # Validate the user using the LS API ( By Bruno - UFG ):
669     try:
670         ls_validate_user( wsgi_request, request )
671     except Exception, e:
672         "Error to validate the user in Labora Scheduler."
673
674 def create_user_in_ldap(wsgi_request, request, user_detail):
675     """
676     """
677    
678     # saves the user to django auth_user table [needed for password reset]
679     user = User.objects.create_user(request['username'], request['email'], request['password'])
680
681     # Creating a manifold user
682     user_id = manifold_add_user(wsgi_request, request)
683
684     # Creating a Manifold account on the MySlice platform
685     # Note the JSON representation of public and private keys already includes quotes
686     account_config = {
687         'user_hrn'          : request['user_hrn'],
688         'user_public_key'   : request['public_key'],
689     }
690     if request['private_key']:
691         account_config['user_private_key'] = request['private_key']
692
693     user_id = user_detail['user_id'] + 1 # the user_id for the newly created user in local:user
694
695     # XXX TODO: Require a myslice platform
696     # ALERT: this will disapear with ROUTERV2 of Manifold
697     # We have to consider the case where several registries can be used
698     # Removed hardcoded platform = 5
699     # This platform == 'myslice' is a TMP FIX !!
700     try:
701         reg_platform_query = Query().get('local:platform') \
702             .filter_by('platform', '==', 'myslice')           \
703             .select('platform_id')
704         reg_platform = execute_admin_query(wsgi_request, reg_platform_query)
705         reg_platform_id = reg_platform[0]['platform_id']
706         account_params = {
707             'platform_id'   : reg_platform_id, # XXX ALERT !!
708             'user_id'       : user_id, 
709             'auth_type'     : request['auth_type'], 
710             'config'        : json.dumps(account_config),
711         }
712         manifold_add_account(wsgi_request, account_params)
713     except Exception, e:
714        print "Failed creating manifold account on platform %s for user: %s" % ('myslice', request['email'])
715
716     # XXX This has to be stored centrally
717     USER_STATUS_ENABLED = 2
718
719     # Update Manifold user status
720     manifold_update_user(wsgi_request, request['username'], {'status': USER_STATUS_ENABLED})
721
722     # Add reference accounts for platforms
723     manifold_add_reference_user_accounts(wsgi_request, request)
724     
725     organization = request['username'].split('@')[1]
726     lsClient = LaboraSchedulerClient( organization )
727     
728     userId = lsClient.get_user_id_by_username( { 'username': str( request['username'] ) } )
729
730     ls_up_pkey = ls_update_public_key( wsgi_request, request, lsClient, userId )
731     
732     if ls_up_pkey:
733         print "OK PKEY"
734
735     from sfa.util.xrn import Xrn 
736
737     auth_pi = request.get('pi', None)
738     auth_pi = list([auth_pi]) if auth_pi else list()
739
740     # We create a user request with Manifold terminology
741     sfa_user_params = {
742         'user_hrn'          : request['user_hrn'],
743         'user_email'        : request['email'],
744         'user_urn'          : Xrn(request['user_hrn'], request['type']).get_urn(),
745         'user_type'         : request['type'],
746         'keys'              : request['public_key'],
747         'user_first_name'   : request['first_name'],
748         'user_last_name'    : request['last_name'],
749         'pi_authorities'    : auth_pi,
750         'user_enabled'      : True
751     }
752
753     print request['user_hrn']
754     print request['email']
755     print request['first_name']
756     print request['last_name']
757     print request['type']
758     print request['public_key']
759
760     query = Query.create('user').set(sfa_user_params).select('user_hrn')
761
762     print query
763
764     results = execute_admin_query(wsgi_request, query)
765
766     print results
767
768     if not results:
769         raise Exception, "Could not create %s. Already exists ?" % sfa_user_params['user_hrn']
770     else:
771         subject = 'User validated'
772         msg = 'A manager of your institution has validated your account. You have now full user access to the portal.'
773         send_mail(subject, msg, 'support@fibre.org.br',[request['email']], fail_silently=False)       
774     return results
775
776 def create_pending_user(wsgi_request, request, user_detail):
777     """
778     """
779
780     # Insert an entry in the PendingUser table
781     b = PendingUser(
782         first_name    = request['first_name'],
783         last_name     = request['last_name'],
784         authority_hrn = request['authority_hrn'],
785         email         = request['email'],
786         login         = request['username'],
787         password      = request['password'],
788         public_key    = request['public_key'],
789         private_key   = request['private_key'],
790         user_hrn      = request['user_hrn'],
791         pi            = request['pi'],
792         email_hash    = request['email_hash'],
793         reasons       = request['reasons'],
794         status        = 'False',
795     )
796     b.save()
797
798     # sends email to user to activate the email
799     theme.template_name = 'activate_user.html'
800     html_content = render_to_string(theme.template, request)
801     theme.template_name = 'activate_user.txt'
802     text_content = render_to_string(theme.template, request)
803     theme.template_name = 'activate_user_email_subject.txt'
804     subject = render_to_string(theme.template, request)
805     subject = subject.replace('\n', '')
806     #sender = 'support@myslice.info'
807     theme.template_name = 'email_default_sender.txt'
808     sender =  render_to_string(theme.template, request)
809     sender = sender.replace('\n', '')
810     recipient = [request['email']]
811     #recipient = recipient.append(request['email'])
812
813     msg = EmailMultiAlternatives(subject, text_content, sender, recipient)
814     msg.attach_alternative(html_content, "text/html")
815     msg.send()
816    
817     # saves the user to django auth_user table [needed for password reset]
818     user = User.objects.create_user(request['username'], request['email'], request['password'])
819
820     # Creating a manifold user
821     user_id = manifold_add_user(wsgi_request, request)
822
823     # Creating a Manifold account on the MySlice platform
824     # Note the JSON representation of public and private keys already includes quotes
825     account_config = {
826         'user_hrn'          : request['user_hrn'],
827         'user_public_key'   : request['public_key'],
828     }
829     if request['private_key']:
830         account_config['user_private_key'] = request['private_key']
831
832     user_id = user_detail['user_id'] + 1 # the user_id for the newly created user in local:user
833
834     # XXX TODO: Require a myslice platform
835     # ALERT: this will disapear with ROUTERV2 of Manifold
836     # We have to consider the case where several registries can be used
837     # Removed hardcoded platform = 5
838     # This platform == 'myslice' is a TMP FIX !!
839     try:
840         reg_platform_query = Query().get('local:platform') \
841             .filter_by('platform', '==', 'myslice')           \
842             .select('platform_id')
843         reg_platform = execute_admin_query(wsgi_request, reg_platform_query)
844         reg_platform_id = reg_platform[0]['platform_id']
845         account_params = {
846             'platform_id'   : reg_platform_id, # XXX ALERT !!
847             'user_id'       : user_id, 
848             'auth_type'     : request['auth_type'], 
849             'config'        : json.dumps(account_config),
850         }
851         manifold_add_account(wsgi_request, account_params)
852     except Exception, e:
853        print "Failed creating manifold account on platform %s for user: %s" % ('myslice', request['email'])
854
855     # Add user to island using LS API ( By Bruno - UFG )
856     ls_user_create = ls_create_user( wsgi_request, request, user_detail )
857
858     try:
859         # Send an email: the recipients are the PI of the authority
860         # If No PI is defined for this Authority, send to a default email (different for each theme)
861
862         split_authority_hrn = request['authority_hrn'].split(".")[0]
863
864         recipients = authority_get_pi_emails(wsgi_request, split_authority_hrn)
865
866         pis = authority_get_pis(request, split_authority_hrn)
867         pi_emails = []
868         for x in pis:
869             for e in x['pi_users']:
870                 try:
871                     u = e.split(".")[1]
872                     y = User.objects.get(username = u)
873                     if y.username.count("@") != 0:
874                         if y.username.split("@")[1] == request['username'].split("@")[1]:
875                             pi_emails += [y.email]
876                 except:
877                     print "fail"
878
879         theme.template_name = 'user_request_email.html'
880         html_content = render_to_string(theme.template, request)
881  
882         theme.template_name = 'user_request_email.txt'
883         text_content = render_to_string(theme.template, request)
884     
885         theme.template_name = 'user_request_email_subject.txt'
886         subject = render_to_string(theme.template, request)
887         subject = subject.replace('\n', '')
888     
889         theme.template_name = 'email_default_sender.txt'
890         sender =  render_to_string(theme.template, request)
891         sender = sender.replace('\n', '')
892     
893         msg = EmailMultiAlternatives(subject, text_content, sender, pi_emails)
894
895         msg.attach_alternative(html_content, "text/html")
896         msg.send()
897         print pi_emails
898     except Exception, e:
899         print "Failed to send email, please check the mail templates and the SMTP configuration of your server"
900         import traceback
901         traceback.print_exc()