4 from collections import defaultdict
5 from django.forms.models import model_to_dict
6 from django.db import models
7 from django.db.models import F, Q
8 from core.models import PlCoreBase,Site, DashboardView, DiffModelMixIn
9 from django.contrib.auth.models import AbstractBaseUser, BaseUserManager
10 from timezones.fields import TimeZoneField
11 from operator import itemgetter, attrgetter
12 from django.core.mail import EmailMultiAlternatives
13 from core.middleware import get_request
15 from django.core.exceptions import PermissionDenied
17 # ------ from plcorebase.py ------
19 # This is a no-op if observer_disabled is set to 1 in the config file
20 from observer import *
22 print >> sys.stderr, "import of observer failed! printing traceback and disabling observer:"
26 # guard against something failing
27 def notify_observer(*args, **kwargs):
31 # Create your models here.
32 class UserManager(BaseUserManager):
33 def create_user(self, email, firstname, lastname, password=None):
35 Creates and saves a User with the given email, date of
39 raise ValueError('Users must have an email address')
42 email=UserManager.normalize_email(email),
47 #user.set_password(password)
49 user.save(using=self._db)
52 def create_superuser(self, email, firstname, lastname, password):
54 Creates and saves a superuser with the given email, date of
57 user = self.create_user(email,
63 user.save(using=self._db)
66 def get_queryset(self):
67 parent=super(UserManager, self)
68 if hasattr(parent, "get_queryset"):
69 return parent.get_queryset().filter(deleted=False)
71 return parent.get_query_set().filter(deleted=False)
73 # deprecated in django 1.7 in favor of get_queryset().
74 def get_query_set(self):
75 return self.get_queryset()
77 class DeletedUserManager(UserManager):
78 def get_queryset(self):
79 return super(UserManager, self).get_query_set().filter(deleted=True)
81 # deprecated in django 1.7 in favor of get_queryset()
82 def get_query_set(self):
83 return self.get_queryset()
85 class User(AbstractBaseUser): # , DiffModelMixIn):
87 # ---- copy stuff from DiffModelMixin ----
91 return model_to_dict(self, fields=[field.name for field in
98 diffs = [(k, (v, d2[k])) for k, v in d1.items() if v != d2[k]]
102 def has_changed(self):
103 return bool(self.diff)
106 def changed_fields(self):
107 return self.diff.keys()
109 def has_field_changed(self, field_name):
110 return field_name in self.diff.keys()
112 def get_field_diff(self, field_name):
113 return self.diff.get(field_name, None)
114 # ---- end copy stuff from DiffModelMixin ----
119 email = models.EmailField(
120 verbose_name='email address',
126 username = models.CharField(max_length=255, default="Something" )
128 firstname = models.CharField(help_text="person's given name", max_length=200)
129 lastname = models.CharField(help_text="person's surname", max_length=200)
131 phone = models.CharField(null=True, blank=True, help_text="phone number contact", max_length=100)
132 user_url = models.URLField(null=True, blank=True)
133 site = models.ForeignKey(Site, related_name='users', help_text="Site this user will be homed too", null=True)
134 public_key = models.TextField(null=True, blank=True, max_length=1024, help_text="Public key string")
136 is_active = models.BooleanField(default=True)
137 is_admin = models.BooleanField(default=True)
138 is_staff = models.BooleanField(default=True)
139 is_readonly = models.BooleanField(default=False)
141 created = models.DateTimeField(auto_now_add=True)
142 updated = models.DateTimeField(auto_now=True)
143 enacted = models.DateTimeField(null=True, default=None)
144 backend_status = models.CharField(max_length=140,
145 default="Provisioning in progress")
146 deleted = models.BooleanField(default=False)
148 timezone = TimeZoneField()
150 dashboards = models.ManyToManyField('DashboardView', through='UserDashboardView', blank=True)
152 objects = UserManager()
153 deleted_objects = DeletedUserManager()
155 USERNAME_FIELD = 'email'
156 REQUIRED_FIELDS = ['firstname', 'lastname']
158 PI_FORBIDDEN_FIELDS = ["is_admin", "site", "is_staff"]
159 USER_FORBIDDEN_FIELDS = ["is_admin", "is_active", "site", "is_staff", "is_readonly"]
161 def __init__(self, *args, **kwargs):
162 super(User, self).__init__(*args, **kwargs)
163 self._initial = self._dict # for DiffModelMixIn
165 def isReadOnlyUser(self):
166 return self.is_readonly
168 def get_full_name(self):
169 # The user is identified by their email address
172 def get_short_name(self):
173 # The user is identified by their email address
176 def delete(self, *args, **kwds):
177 # so we have something to give the observer
178 purge = kwds.get('purge',False)
182 purge = purge or observer_disabled
187 super(User, self).delete(*args, **kwds)
191 self.save(update_fields=['enacted','deleted'])
195 return self.email[:self.email.find('@')]
197 def __unicode__(self):
200 def has_perm(self, perm, obj=None):
201 "Does the user have a specific permission?"
202 # Simplest possible answer: Yes, always
205 def has_module_perms(self, app_label):
206 "Does the user have permissions to view the app `app_label`?"
207 # Simplest possible answer: Yes, always
210 def is_superuser(self):
213 def get_dashboards(self):
214 DEFAULT_DASHBOARDS=["Tenant"]
216 dashboards = sorted(list(self.userdashboardviews.all()), key=attrgetter('order'))
217 dashboards = [x.dashboardView for x in dashboards]
220 for dashboardName in DEFAULT_DASHBOARDS:
221 dbv = DashboardView.objects.filter(name=dashboardName)
223 dashboards.append(dbv[0])
227 # def get_roles(self):
228 # from core.models.site import SitePrivilege
229 # from core.models.slice import SliceMembership
231 # site_privileges = SitePrivilege.objects.filter(user=self)
232 # slice_memberships = SliceMembership.objects.filter(user=self)
233 # roles = defaultdict(list)
234 # for site_privilege in site_privileges:
235 # roles[site_privilege.role.role_type].append(site_privilege.site.login_base)
236 # for slice_membership in slice_memberships:
237 # roles[slice_membership.role.role_type].append(slice_membership.slice.name)
240 def save(self, *args, **kwds):
242 self.set_password(self.password)
244 if self.password=="!":
\r
245 self.send_temporary_password()
\r
247 self.username = self.email
248 super(User, self).save(*args, **kwds)
250 self._initial = self._dict
252 def send_temporary_password(self):
253 password = User.objects.make_random_password()
254 self.set_password(password)
\r
255 subject, from_email, to = 'OpenCloud Account Credentials', 'support@opencloud.us', str(self.email)
\r
256 text_content = 'This is an important message.'
\r
257 userUrl="http://%s/" % get_request().get_host()
\r
258 html_content = """<p>Your account has been created on OpenCloud. Please log in <a href="""+userUrl+""">here</a> to activate your account<br><br>Username: """+self.email+"""<br>Temporary Password: """+password+"""<br>Please change your password once you successully login into the site.</p>"""
\r
259 msg = EmailMultiAlternatives(subject,text_content, from_email, [to])
\r
260 msg.attach_alternative(html_content, "text/html")
\r
263 def can_update(self, user):
264 from core.models import SitePrivilege
265 _cant_update_fieldName = None
270 # site pis can update
271 site_privs = SitePrivilege.objects.filter(user=user, site=self.site)
272 for site_priv in site_privs:
273 if site_priv.role.role == 'pi':
274 for fieldName in self.diff.keys():
275 if fieldName in self.PI_FORBIDDEN_FIELDS:
276 _cant_update_fieldName = fieldName
279 if (user.id == self.id):
280 for fieldName in self.diff.keys():
281 if fieldName in self.USER_FORBIDDEN_FIELDS:
282 _cant_update_fieldName = fieldName
289 def select_by_user(user):
291 qs = User.objects.all()
293 # can see all users at any site where this user has pi role
294 from core.models.site import SitePrivilege
295 site_privs = SitePrivilege.objects.filter(user=user)
296 sites = [sp.site for sp in site_privs if sp.role.role == 'pi']
297 # get site privs of users at these sites
298 site_privs = SitePrivilege.objects.filter(site__in=sites)
299 user_ids = [sp.user.id for sp in site_privs] + [user.id]
300 qs = User.objects.filter(Q(site__in=sites) | Q(id__in=user_ids))
303 def save_by_user(self, user, *args, **kwds):
304 if not self.can_update(user):
305 if getattr(self, "_cant_update_fieldName", None) is not None:
306 raise PermissionDenied("You do not have permission to update field %s on object %s" % (self._cant_update_fieldName, self.__class__.__name__))
308 raise PermissionDenied("You do not have permission to update %s objects" % self.__class__.__name__)
310 self.save(*args, **kwds)
312 def delete_by_user(self, user, *args, **kwds):
313 if not self.can_update(user):
314 raise PermissionDenied("You do not have permission to delete %s objects" % self.__class__.__name__)
315 self.delete(*args, **kwds)
317 class UserDashboardView(PlCoreBase):
318 user = models.ForeignKey(User, related_name='userdashboardviews')
319 dashboardView = models.ForeignKey(DashboardView, related_name='userdashboardviews')
320 order = models.IntegerField(default=0)