MyAcc: DL and Clear cred - OK
[myslice.git] / portal / accountview.py
index 66eb91e..9c730b5 100644 (file)
@@ -2,7 +2,7 @@ from unfold.loginrequired               import LoginRequiredAutoLogoutView
 #
 from manifold.core.query                import Query
 from manifold.manifoldapi               import execute_query
-from portal.actions                     import manifold_update_user, manifold_update_account
+from portal.actions                     import manifold_update_user, manifold_update_account, manifold_add_account, manifold_delete_account
 #
 from ui.topmenu                         import topmenu_items, the_user
 #
@@ -44,10 +44,13 @@ class AccountView(LoginRequiredAutoLogoutView):
         account_type = ''
         account_usr_hrn = ''
         account_pub_key = ''
+        account_priv_key = ''
         account_reference = ''
         my_users = ''
         my_slices = ''
         my_auths = ''
+        ref_acc_list = ''
+        principal_acc_list = ''
         platform_name_list = []
         platform_name_secondary_list = []
         platform_access_list = []
@@ -124,7 +127,7 @@ class AccountView(LoginRequiredAutoLogoutView):
                         platform_name_secondary_list.append(platform_name)
                         account_type_secondary_list.append(account_type)
                         account_reference_list.append(account_reference)
-                        secondary_list = [{'platform_name': t[0], 'account_type': t[1], 'account_reference': t[2]} 
+                        ref_acc_list = [{'platform_name': t[0], 'account_type': t[1], 'account_reference': t[2]} 
                             for t in zip(platform_name_secondary_list, account_type_secondary_list, account_reference_list)]
                        
                     elif 'managed' in account_detail['auth_type']:
@@ -141,7 +144,7 @@ class AccountView(LoginRequiredAutoLogoutView):
                         usr_hrn_list.append(account_usr_hrn)
                         pub_key_list.append(account_pub_key)
                         # combining 5 lists into 1 [to render in the template] 
-                        lst = [{'platform_name': t[0], 'account_type': t[1], 'delegation_type': t[2], 'usr_hrn':t[3], 'usr_pubkey':t[4]} 
+                        principal_acc_list = [{'platform_name': t[0], 'account_type': t[1], 'delegation_type': t[2], 'usr_hrn':t[3], 'usr_pubkey':t[4]} 
                             for t in zip(platform_name_list, account_type_list, delegation_type_list, usr_hrn_list, pub_key_list)]
                     # to hide private key row if it doesn't exist    
                     if 'myslice' in platform_detail['platform']:
@@ -159,8 +162,8 @@ class AccountView(LoginRequiredAutoLogoutView):
             for t in itertools.izip_longest(total_platform_list)]
 
         context = super(AccountView, self).get_context_data(**kwargs)
-        context['data'] = lst
-        context['ref_acc'] = secondary_list
+        context['principal_acc'] = principal_acc_list
+        context['ref_acc'] = ref_acc_list
         context['platform_list'] = platform_list
         context['my_users'] = my_users
         context['my_slices'] = my_slices
@@ -187,7 +190,7 @@ class AccountView(LoginRequiredAutoLogoutView):
 @login_required
 #my_acc form value processing
 def account_process(request):
-    user_query  = Query().get('local:user').select('password','config')
+    user_query  = Query().get('local:user').select('user_id','email','password','config')
     user_details = execute_query(request, user_query)
     
     account_query  = Query().get('local:account').select('user_id','platform_id','auth_type','config')
@@ -195,18 +198,58 @@ def account_process(request):
 
     platform_query  = Query().get('local:platform').select('platform_id','platform')
     platform_details = execute_query(request, platform_query)
+    
+    # getting the user_id from the session
+    for user_detail in user_details:
+            user_id = user_detail['user_id']
 
-   # for account_detail in account_details:
-    #    if account_detail['platform_id'] == 5: 
-     #       account_config = json.loads(account_detail['config'])
-
+    for account_detail in account_details:
+        for platform_detail in platform_details:
+            if platform_detail['platform_id'] == account_detail['platform_id']:
+                if 'myslice' in platform_detail['platform']:
+                    account_config = json.loads(account_detail['config'])
+                    acc_slice_cred = account_config.get('delegated_slice_credentials','N/A')
+                    acc_auth_cred = account_config.get('delegated_authority_credentials','N/A')
+                    
+    
+    # adding the slices and corresponding credentials to list
+    if 'N/A' not in acc_slice_cred:
+        slice_list = []
+        slice_cred = [] 
+        for key, value in acc_slice_cred.iteritems():
+            slice_list.append(key)       
+            slice_cred.append(value)
+        # special case: download each slice credentials separately -- too complicated
+        for i in range(0, len(slice_list)):
+            if 'dl_'+slice_list[i] in request.POST:
+                slice_detail = "Slice name: " + slice_list[i] +"\nSlice Credentials: \n"+ slice_cred[i]
+                response = HttpResponse(slice_detail, content_type='text/plain')
+                response['Content-Disposition'] = 'attachment; filename="slice_credential.txt"'
+                return response
+
+    # adding the authority and corresponding credentials to list
+    if 'N/A' not in acc_auth_cred:
+        auth_list = []
+        auth_cred = [] 
+        for key, value in acc_auth_cred.iteritems():
+            auth_list.append(key)       
+            auth_cred.append(value)
+        # special case: download each slice credentials separately -- too complicated
+        for i in range(0, len(auth_list)):
+            if 'dl_'+auth_list[i] in request.POST:
+                auth_detail = "Authority: " + auth_list[i] +"\nAuthority Credentials: \n"+ auth_cred[i]
+                response = HttpResponse(auth_detail, content_type='text/plain')
+                response['Content-Disposition'] = 'attachment; filename="auth_credential.txt"'
+                return response
+
+
+             
     if 'submit_name' in request.POST:
         edited_first_name =  request.POST['fname']
         edited_last_name =  request.POST['lname']
         
         config={}
         for user_config in user_details:
-        #email = user_detail['email']
             if user_config['config']:
                 config = json.loads(user_config['config'])
                 config['firstname'] = edited_first_name
@@ -218,10 +261,8 @@ def account_process(request):
                 user_config['config']= '{"firstname":"' + edited_first_name + '", "lastname":"'+ edited_last_name + '", "authority": "Unknown Authority"}'
                 user_params = {'config': user_config['config']} 
         # updating config local:user in manifold       
-        #user_params = { 'config': updated_config}
         manifold_update_user(request,user_params)
         # this will be depricated, we will show the success msg in same page
-#        return HttpResponse('Sucess: First Name and Last Name Updated!')
         # Redirect to same page with success message
         messages.success(request, 'Sucess: First Name and Last Name Updated.')
         return HttpResponseRedirect("/portal/account/")       
@@ -250,20 +291,6 @@ def account_process(request):
                         private_key = json.dumps(private.exportKey())
                         public  = private.publickey()
                         public_key = json.dumps(public.exportKey(format='OpenSSH'))
-                        # Generate public and private keys using SFA Library
-#                        from sfa.trust.certificate  import Keypair
-#                        k = Keypair(create=True)
-#                        public_key = k.get_pubkey_string()
-#                        private_key = k.as_pem()
-#                        private_key = ''.join(private_key.split())
-#                        public_key = "ssh-rsa " + public_key
-                        # now we overwrite the config field with keypair
-                        # once there will be user_hrn, we need to keep user_hrn and change only the keypair
-                        # see submit_name section for implementing this    
-#                       keypair = re.sub("\r", "", keypair)
-#                       keypair = re.sub("\n", "\\n", keypair)
-#                       #keypair = keypair.rstrip('\r\n')
-#                       keypair = ''.join(keypair.split())
                         # updating maniolf local:account table
                         account_config = json.loads(account_detail['config'])
                         # preserving user_hrn
@@ -351,7 +378,7 @@ def account_process(request):
                         account_config = json.loads(account_detail['config'])
                         if 'user_private_key' in account_config:
                             for key in account_config.keys():
-                                if key== 'user_private_key':    
+                                if key == 'user_private_key':    
                                     del account_config[key]
                                 
                             updated_config = json.dumps(account_config)
@@ -367,64 +394,139 @@ def account_process(request):
             messages.error(request, 'Account error: You need an account in myslice platform to perform this action')    
             return HttpResponseRedirect("/portal/account/")
 
-    # add reference platforms       
+    #clear all creds
+    elif 'clear_cred' in request.POST:
+        for account_detail in account_details:
+            for platform_detail in platform_details:
+                if platform_detail['platform_id'] == account_detail['platform_id']:
+                    if 'myslice' in platform_detail['platform']:
+                        account_config = json.loads(account_detail['config'])
+                        user_cred = account_config.get('delegated_user_credential','N/A')
+                        if 'N/A' not in user_cred:
+                            user_hrn = account_config.get('user_hrn','N/A')
+                            user_pub_key = account_config.get('user_public_key','N/A')         
+                            user_priv_key = account_config.get('user_private_key','N/A')
+                            updated_config = '{"user_public_key":"'+ user_pub_key + '", "user_private_key":"'+ user_priv_key + '", "user_hrn":"'+ user_hrn + '"}'
+                            updated_config = ''.join(updated_config.split()) 
+                            user_params = { 'config': updated_config}
+                            manifold_update_account(request,user_params)
+                            messages.success(request, 'All Credentials cleared')
+                            return HttpResponseRedirect("/portal/account/")
+                        else:
+                            messages.error(request, 'Delete error: Credentials are not stored in the server')
+                            return HttpResponseRedirect("/portal/account/")
+        else:
+            messages.error(request, 'Account error: You need an account in myslice platform to perform this action')
+            return HttpResponseRedirect("/portal/account/")
+
+
+    # Download delegated_user_cred
+    elif 'dl_user_cred' in request.POST:
+        if 'delegated_user_credential' in account_config:
+            user_cred = account_config['delegated_user_credential']
+            response = HttpResponse(user_cred, content_type='text/plain')
+            response['Content-Disposition'] = 'attachment; filename="user_cred.txt"'
+            return response
+        else:
+            messages.error(request, 'Download error: User credential  is not stored in the server')
+            return HttpResponseRedirect("/portal/account/")
+        
+    # add reference platforms  
     elif 'add_fuseco' in request.POST:
-        # The recipients are the PI of the authority
-        #recipients = authority_get_pi_emails(request, authority_hrn)
-        recipients = ["support@myslice.info"] 
-        requester = request.user # current user
-        sender = 'yasin.upmc@gmail.com' # the server email
-        msg = "OneLab user %s requested account in fuseco Platform" % requester
-        send_mail("Onelab user %s requested an account in Fuseco"%requester , msg, sender, recipients)
-        messages.info(request, 'Request to get access on Fuseco platform received. Please wait for PI\'s reply.')
+        for platform_detail in platform_details:
+            if platform_detail['platform'] == "fuseco":
+                platform_id = platform_detail['platform_id']
+
+        user_params = {'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}'}
+        manifold_add_account(request,user_params)
+
+        messages.info(request, 'Reference Account added on Fuseco platform. You have now access to Fuseco resources.')
         return HttpResponseRedirect("/portal/account/")
 
     elif 'add_ple' in request.POST:
-        # The recipients are the PI of the authority
-        #recipients = authority_get_pi_emails(request, authority_hrn)
-        recipients = ["support@myslice.info"] 
-        requester = request.user # current user
-        sender = 'yasin.upmc@gmail.com' # the server email
-        msg = "OneLab user %s requested account in fuseco Platform" % requester
-        send_mail("Onelab user %s requested an account in PLE"%requester , msg, sender, recipients)
-        messages.info(request, 'Request to get access on PLE platform received. Please wait for PI\'s reply.')
+        for platform_detail in platform_details:
+            if platform_detail['platform'] == "ple":
+                platform_id = platform_detail['platform_id']
+        user_params = {'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}'}
+        manifold_add_account(request,user_params)
+        messages.info(request, 'Reference Account added on PLE platform. You have now access to PLE resources.')
         return HttpResponseRedirect("/portal/account/")
 
     elif 'add_omf' in request.POST:
-        # The recipients are the PI of the authority
-        #recipients = authority_get_pi_emails(request, authority_hrn)
-        recipients = ["support@myslice.info"]
-        requester = request.user # current user
-        sender = 'yasin.upmc@gmail.com' # the server email
-        msg = "OneLab user %s requested account in omf:nitos Platform" % requester
-        send_mail("Onelab user %s requested an account in OMF:NITOS"%requester , msg, sender, recipients)
-        messages.info(request, 'Request to get access on OMF:NITOS platform received. Please wait for PI\'s reply.')
+        for platform_detail in platform_details:
+            if platform_detail['platform'] == "omf":
+                platform_id = platform_detail['platform_id']
+        user_params = {'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}'}
+        manifold_add_account(request,user_params)
+        messages.info(request, 'Reference Account added on OMF:Nitos platform. You have now access to OMF:Nitos resources.')
         return HttpResponseRedirect("/portal/account/")
 
     elif 'add_wilab' in request.POST:
-        # The recipients are the PI of the authority
-        #recipients = authority_get_pi_emails(request, authority_hrn)
-        recipients = ["support@myslice.info"]
-        requester = request.user # current user
-        sender = 'yasin.upmc@gmail.com' # the server email
-        msg = "OneLab user %s requested account in Wilab Platform" % requester
-        send_mail("Onelab user %s requested an account in Wilab"%requester , msg, sender, recipients)
-        messages.info(request, 'Request to get access on Wilab platform received. Please wait for PI\'s reply.')
+        for platform_detail in platform_details:
+            if platform_detail['platform'] == "wilab":
+                platform_id = platform_detail['platform_id']
+        user_params = {'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}'}
+        manifold_add_account(request,user_params)
+        messages.info(request, 'Reference Account added on Wilab platform. You have now access to Wilab resources.')
         return HttpResponseRedirect("/portal/account/")
 
     elif 'iotlab' in request.POST:
-        # The recipients are the PI of the authority
-        #recipients = authority_get_pi_emails(request, authority_hrn)
-        recipients = ["support@myslice.info"]
-        requester = request.user # current user
-        sender = 'yasin.upmc@gmail.com' # the server email
-        msg = "OneLab user %s requested account in IOTLab Platform" % requester
-        send_mail("Onelab user %s requested an account in IOTLab"%requester , msg, sender, recipients)
-        messages.info(request, 'Request to get access on IOTLab platform received. Please wait for PI\'s reply.')
+        for platform_detail in platform_details:
+            if platform_detail['platform'] == "iotlab":
+                platform_id = platform_detail['platform_id']
+        user_params = {'platform_id': platform_id, 'user_id': user_id, 'auth_type': "reference", 'config': '{"reference_platform": "myslice"}'}
+        manifold_add_account(request,user_params)
+        messages.info(request, 'Reference Account added on IOTLab platform. You have now access to IOTLab resources.')
+        return HttpResponseRedirect("/portal/account/")
+        
+    # delete reference platforms  
+    elif 'delete_fuseco' in request.POST:
+        for platform_detail in platform_details:
+            if platform_detail['platform'] == "fuseco":
+                platform_id = platform_detail['platform_id']
+        user_params = {'user_id':user_id}
+        manifold_delete_account(request,platform_id,user_params)
+        messages.info(request, 'Reference Account is removed from Fuseco platform. You have no access to Fuseco resources anymore.')
+        return HttpResponseRedirect("/portal/account/")
+
+    elif 'delete_ple' in request.POST:
+        for platform_detail in platform_details:
+            if platform_detail['platform'] == "ple":
+                platform_id = platform_detail['platform_id']
+        user_params = {'user_id':user_id}
+        manifold_delete_account(request,platform_id,user_params)
+        messages.info(request, 'Reference Account is removed from PLE platform. You have no access to PLE resources anymore.')
+        return HttpResponseRedirect("/portal/account/")
+    
+    elif 'delete_omf' in request.POST:
+        for platform_detail in platform_details:
+            if platform_detail['platform'] == "omf":
+                platform_id = platform_detail['platform_id']
+        user_params = {'user_id':user_id}
+        manifold_delete_account(request,platform_id,user_params)
+        messages.info(request, 'Reference Account is removed from OMF:Nitos platform. You have no access to OMF:Nitos resources anymore.')
+        return HttpResponseRedirect("/portal/account/")
+    
+    elif 'delete_wilab' in request.POST:
+        for platform_detail in platform_details:
+            if platform_detail['platform'] == "wilab":
+                platform_id = platform_detail['platform_id']
+        user_params = {'user_id':user_id}
+        manifold_delete_account(request,platform_id,user_params)
+        query = Query.delete('local:account').filter_by('platform_id','==',platform_id)
+        results = execute_query(request,query)
+        messages.info(request, 'Reference Account is removed from Wilab platform. You have no access to Wilab resources anymore.')
+        return HttpResponseRedirect("/portal/account/")
+
+    elif 'delete_iotlab' in request.POST:
+        for platform_detail in platform_details:
+            if platform_detail['platform'] == "iotlab":
+                platform_id = platform_detail['platform_id']
+        user_params = {'user_id':user_id}
+        manifold_delete_account(request,platform_id,user_params)
+        messages.info(request, 'Reference Account is removed from IOTLab platform. You have no access to IOTLab resources anymore.')
         return HttpResponseRedirect("/portal/account/")
 
-    #delete reference platoforms
-  
     else:
         messages.info(request, 'Under Construction. Please try again later!')
         return HttpResponseRedirect("/portal/account/")