CHECK PI: check in sfa using a function in actions.py -- authority_check_pis
[myslice.git] / portal / slicerequestview.py
1 from django.shortcuts           import render
2 from django.contrib.sites.models import Site
3
4
5 from unfold.page                import Page
6
7 from manifold.core.query        import Query
8 from manifoldapi.manifoldapi    import execute_admin_query, execute_query
9
10 from portal.actions             import is_pi, create_slice, create_pending_slice, clear_user_creds, authority_check_pis
11 #from portal.forms               import SliceRequestForm
12 from unfold.loginrequired       import LoginRequiredAutoLogoutView
13 from ui.topmenu                 import topmenu_items_live, the_user
14
15 from myslice.theme import ThemeView
16
17 import json, time, re
18
19 import activity.user
20
21 class SliceRequestView (LoginRequiredAutoLogoutView, ThemeView):
22     template_name = 'slicerequest_view.html'
23     
24     # because we inherit LoginRequiredAutoLogoutView that is implemented by redefining 'dispatch'
25     # we cannot redefine dispatch here, or we'd lose LoginRequired and AutoLogout behaviours
26     def post (self, request):
27         return self.get_or_post (request, 'POST')
28
29     def get (self, request):
30         return self.get_or_post (request, 'GET')
31
32     def get_or_post  (self, wsgi_request, method):
33         """
34         """
35         errors = []
36         slice_name =''
37         purpose=''
38         url=''
39         authority_hrn = None
40         authority_name = None
41         # Retrieve the list of authorities
42         authorities_query = Query.get('authority').select('name', 'authority_hrn')
43         authorities = execute_admin_query(wsgi_request, authorities_query)
44         if authorities is not None:
45             authorities = sorted(authorities)
46
47         # Get user_email (XXX Would deserve to be simplified)
48         user_query  = Query().get('local:user').select('email','config')
49         user_details = execute_query(wsgi_request, user_query)
50         user_email = user_details[0].get('email')
51         # getting user_hrn
52         for user_detail in user_details:
53             user_config = json.loads(user_detail['config'])
54             user_authority = user_config.get('authority','N/A')              
55         # getting the org from authority        
56         for authority in authorities:
57             if authority['authority_hrn'] == user_authority:
58                 authority_name = authority['name']
59
60         # Handle the case when we use only hrn and not name
61         if authority_name is None:
62             authority_name = user_authority
63         
64         account_query  = Query().get('local:account').select('user_id','platform_id','auth_type','config')
65         account_details = execute_query(wsgi_request, account_query)
66         
67         platform_query  = Query().get('local:platform').select('platform_id','platform','gateway_type','disabled')
68         platform_details = execute_query(wsgi_request, platform_query)
69         user_hrn = None
70         #getting user_hrn from local:account
71         for account_detail in account_details:
72             for platform_detail in platform_details:
73                 if platform_detail['platform_id'] == account_detail['platform_id']:
74                     # taking user_hrn only from myslice account
75                     # NOTE: we should later handle accounts filter_by auth_type= managed OR user
76                     if 'myslice' in platform_detail['platform']:
77                         account_config = json.loads(account_detail['config'])
78                         user_hrn = account_config.get('user_hrn','N/A')
79         #                acc_auth_cred = account_config.get('delegated_authority_credentials','N/A')
80
81
82         # checking if pi or not
83         #if acc_auth_cred == {} or acc_auth_cred == 'N/A':
84         #    pi = "is_not_pi"
85         #else:
86         #    pi = "is_pi"
87
88         pi = authority_check_pis (wsgi_request, user_email)       
89
90         # Page rendering
91         page = Page(wsgi_request)
92         page.add_js_files  ( [ "js/jquery.validate.js", "js/jquery-ui.js" ] )
93         page.add_css_files ( [ "https://code.jquery.com/ui/1.10.3/themes/smoothness/jquery-ui.css" ] )
94         page.expose_js_metadata()
95
96         if method == 'POST':
97             # The form has been submitted
98
99             # get the domain url
100             current_site = Site.objects.get_current()
101             current_site = current_site.domain
102             
103             # getting the authority_hrn from the selected organization
104             for authority in authorities:
105                 if authority['name'] == wsgi_request.POST.get('org_name', ''):
106                     authority_hrn = authority['authority_hrn']
107
108             # Handle the case when we use only hrn and not name
109             if authority_hrn is None:
110                 authority_hrn = wsgi_request.POST.get('org_name', '')
111
112             slice_request = {
113                 'type'              : 'slice',
114                 'id'                : None,
115                 'user_hrn'          : user_hrn,
116                 'email'             : user_email,
117                 'timestamp'         : time.time(),
118                 'authority_hrn'     : authority_hrn,
119                 'organization'      : wsgi_request.POST.get('org_name', ''),
120                 'slice_name'        : wsgi_request.POST.get('slice_name', ''),
121                 'url'               : wsgi_request.POST.get('url', ''),
122                 'purpose'           : wsgi_request.POST.get('purpose', ''),
123                 'current_site'      : current_site
124             }
125             
126             # create slice_hrn based on authority_hrn and slice_name
127             slice_name = slice_request['slice_name']
128             req_slice_hrn = authority_hrn + '.' + slice_name
129             # comparing requested slice_hrn with the existing slice_hrn 
130             slice_query  = Query().get('myslice:slice').select('slice_hrn','parent_authority').filter_by('parent_authority','==',authority_hrn)
131             slice_details_sfa = execute_admin_query(wsgi_request, slice_query)
132             for _slice in slice_details_sfa:
133                 if _slice['slice_hrn'] == req_slice_hrn:
134                     errors.append('Slice already exists. Please use a different slice name.')
135             
136
137             # What kind of slice name is valid?
138             if (slice_name is None or slice_name == ''):
139                 errors.append('Slice name is mandatory')
140             
141             if (re.search(r'^[A-Za-z0-9_]*$', slice_name) == None):
142                 errors.append('Slice name may contain only letters, numbers, and underscore.')
143             
144             organization = slice_request['organization']    
145             if (organization is None or organization == ''):
146                 errors.append('Organization is mandatory')
147
148
149     
150             purpose = slice_request['purpose']
151             if (purpose is None or purpose == ''):
152                 errors.append('Experiment purpose is mandatory')
153
154             url = slice_request['url']
155
156             if not errors:
157                 if is_pi(wsgi_request, user_hrn, authority_hrn):
158                     # PIs can directly create slices in their own authority...
159                     create_slice(wsgi_request, slice_request)
160                     clear_user_creds(wsgi_request, user_email)
161                     self.template_name = 'slice-request-done-view.html'
162                 else:
163                     # Otherwise a wsgi_request is sent to the PI
164                     create_pending_slice(wsgi_request, slice_request, user_email)
165                     self.template_name = 'slice-request-ack-view.html'
166                 
167                 # log user activity
168                 activity.user.slice(wsgi_request)
169                 
170                 return render(wsgi_request, self.template, {'theme': self.theme}) # Redirect after POST
171         else:
172             slice_request = {}
173
174         template_env = {
175             'username': wsgi_request.user.email,
176             'topmenu_items': topmenu_items_live('Request a slice', page),
177             'errors': errors,
178             'slice_name': slice_name,
179             'purpose': purpose,
180             'email': user_email,
181             'user_hrn': user_hrn,
182             'url': url,
183             'pi': pi,
184             'authority_name': authority_name,        
185             'authority_hrn': user_authority,        
186             'cc_myself': True,
187             'authorities': authorities,
188             'theme': self.theme,
189             'section': "Slice request"
190         }
191         template_env.update(slice_request)
192         template_env.update(page.prelude_env())
193         return render(wsgi_request, self.template, template_env)