planetstack/core/models/user.py

   1 import os
   2 import datetime
   3 import sys
   4 from collections import defaultdict
   5 from django.forms.models import model_to_dict
   6 from django.db import models
   7 from django.db.models import F, Q
   8 from core.models import PlCoreBase,Site, DashboardView, DiffModelMixIn
   9 from django.contrib.auth.models import AbstractBaseUser, BaseUserManager
  10 from timezones.fields import TimeZoneField
  11 from operator import itemgetter, attrgetter
  12 from django.core.mail import EmailMultiAlternatives
  13 from core.middleware import get_request
  14 import model_policy
  15 from django.core.exceptions import PermissionDenied
  16
  17 # ------ from plcorebase.py ------
  18 try:
  19     # This is a no-op if observer_disabled is set to 1 in the config file
  20     from observer import *
  21 except:
  22     print >> sys.stderr, "import of observer failed! printing traceback and disabling observer:"
  23     import traceback
  24     traceback.print_exc()
  25
  26     # guard against something failing
  27     def notify_observer(*args, **kwargs):
  28         pass
  29 # ------ ------
  30
  31 # Create your models here.
  32 class UserManager(BaseUserManager):
  33     def create_user(self, email, firstname, lastname, password=None):
  34         """
  35         Creates and saves a User with the given email, date of
  36         birth and password.
  37         """
  38         if not email:
  39             raise ValueError('Users must have an email address')
  40
  41         user = self.model(
  42             email=UserManager.normalize_email(email),
  43             firstname=firstname,
  44             lastname=lastname,
  45             password=password
  46         )
  47         #user.set_password(password)
  48         user.is_admin = True
  49         user.save(using=self._db)
  50         return user
  51
  52     def create_superuser(self, email, firstname, lastname, password):
  53         """
  54         Creates and saves a superuser with the given email, date of
  55         birth and password.
  56         """
  57         user = self.create_user(email,
  58             password=password,
  59             firstname=firstname,
  60             lastname=lastname
  61         )
  62         user.is_admin = True
  63         user.save(using=self._db)
  64         return user
  65
  66     def get_queryset(self):
  67         parent=super(UserManager, self)
  68         if hasattr(parent, "get_queryset"):
  69             return parent.get_queryset().filter(deleted=False)
  70         else:
  71             return parent.get_query_set().filter(deleted=False)
  72
  73     # deprecated in django 1.7 in favor of get_queryset().
  74     def get_query_set(self):
  75         return self.get_queryset()
  76
  77 class DeletedUserManager(UserManager):
  78     def get_queryset(self):
  79         return super(UserManager, self).get_query_set().filter(deleted=True)
  80
  81     # deprecated in django 1.7 in favor of get_queryset()
  82     def get_query_set(self):
  83         return self.get_queryset()
  84
  85 class User(AbstractBaseUser): #, DiffModelMixIn):
  86
  87     # ---- copy stuff from DiffModelMixin ----
  88
  89     @property
  90     def _dict(self):
  91         return model_to_dict(self, fields=[field.name for field in
  92                              self._meta.fields])
  93
  94     @property
  95     def diff(self):
  96         d1 = self._initial
  97         d2 = self._dict
  98         diffs = [(k, (v, d2[k])) for k, v in d1.items() if v != d2[k]]
  99         return dict(diffs)
 100
 101     @property
 102     def has_changed(self):
 103         return bool(self.diff)
 104
 105     @property
 106     def changed_fields(self):
 107         return self.diff.keys()
 108
 109     def has_field_changed(self, field_name):
 110         return field_name in self.diff.keys()
 111
 112     def get_field_diff(self, field_name):
 113         return self.diff.get(field_name, None)
 114     # ---- end copy stuff from DiffModelMixin ----
 115
 116     class Meta:
 117         app_label = "core"
 118
 119     email = models.EmailField(
 120         verbose_name='email address',
 121         max_length=255,
 122         unique=True,
 123         db_index=True,
 124     )
 125
 126     username = models.CharField(max_length=255, default="Something" )
 127
 128     firstname = models.CharField(help_text="person's given name", max_length=200)
 129     lastname = models.CharField(help_text="person's surname", max_length=200)
 130
 131     phone = models.CharField(null=True, blank=True, help_text="phone number contact", max_length=100)
 132     user_url = models.URLField(null=True, blank=True)
 133     site = models.ForeignKey(Site, related_name='users', help_text="Site this user will be homed too", null=True)
 134     public_key = models.TextField(null=True, blank=True, max_length=1024, help_text="Public key string")
 135
 136     is_active = models.BooleanField(default=True)
 137     is_admin = models.BooleanField(default=True)
 138     is_staff = models.BooleanField(default=True)
 139     is_readonly = models.BooleanField(default=False)
 140
 141     created = models.DateTimeField(auto_now_add=True)
 142     updated = models.DateTimeField(auto_now=True)
 143     enacted = models.DateTimeField(null=True, default=None)
 144     backend_status = models.CharField(max_length=140,
 145                                       default="Provisioning in progress")
 146     deleted = models.BooleanField(default=False)
 147
 148     timezone = TimeZoneField()
 149
 150     dashboards = models.ManyToManyField('DashboardView', through='UserDashboardView', blank=True)
 151
 152     objects = UserManager()
 153     deleted_objects = DeletedUserManager()
 154
 155     USERNAME_FIELD = 'email'
 156     REQUIRED_FIELDS = ['firstname', 'lastname']
 157
 158     PI_FORBIDDEN_FIELDS = ["is_admin", "site", "is_staff"]
 159     USER_FORBIDDEN_FIELDS = ["is_admin", "is_active", "site", "is_staff", "is_readonly"]
 160
 161     def __init__(self, *args, **kwargs):
 162         super(User, self).__init__(*args, **kwargs)
 163         self._initial = self._dict # for DiffModelMixIn
 164
 165     def isReadOnlyUser(self):
 166         return self.is_readonly
 167
 168     def get_full_name(self):
 169         # The user is identified by their email address
 170         return self.email
 171
 172     def get_short_name(self):
 173         # The user is identified by their email address
 174         return self.email
 175
 176     def delete(self, *args, **kwds):
 177         # so we have something to give the observer
 178         purge = kwds.get('purge',False)
 179         if purge:
 180             del kwds['purge']
 181         try:
 182             purge = purge or observer_disabled
 183         except NameError:
 184             pass
 185
 186         if (purge):
 187             super(User, self).delete(*args, **kwds)
 188         else:
 189             self.deleted = True
 190             self.enacted=None
 191             self.save(update_fields=['enacted','deleted'])
 192
 193     @property
 194     def keyname(self):
 195         return self.email[:self.email.find('@')]
 196
 197     def __unicode__(self):
 198         return self.email
 199
 200     def has_perm(self, perm, obj=None):
 201         "Does the user have a specific permission?"
 202         # Simplest possible answer: Yes, always
 203         return True
 204
 205     def has_module_perms(self, app_label):
 206         "Does the user have permissions to view the app `app_label`?"
 207         # Simplest possible answer: Yes, always
 208         return True
 209
 210     def is_superuser(self):
 211         return False
 212
 213     def get_dashboards(self):
 214         DEFAULT_DASHBOARDS=["Tenant"]
 215
 216         dashboards = sorted(list(self.userdashboardviews.all()), key=attrgetter('order'))
 217         dashboards = [x.dashboardView for x in dashboards]
 218
 219         if not dashboards:
 220             for dashboardName in DEFAULT_DASHBOARDS:
 221                 dbv = DashboardView.objects.filter(name=dashboardName)
 222                 if dbv:
 223                     dashboards.append(dbv[0])
 224
 225         return dashboards
 226
 227 #    def get_roles(self):
 228 #        from core.models.site import SitePrivilege
 229 #        from core.models.slice import SliceMembership
 230 #
 231 #        site_privileges = SitePrivilege.objects.filter(user=self)
 232 #        slice_memberships = SliceMembership.objects.filter(user=self)
 233 #        roles = defaultdict(list)
 234 #        for site_privilege in site_privileges:
 235 #            roles[site_privilege.role.role_type].append(site_privilege.site.login_base)
 236 #        for slice_membership in slice_memberships:
 237 #            roles[slice_membership.role.role_type].append(slice_membership.slice.name)
 238 #        return roles
 239
 240     def save(self, *args, **kwds):
 241         if not self.id:
 242             self.set_password(self.password)
 243         if self.is_active:
 244             if self.password=="!":\r
 245                 self.send_temporary_password()\r
 246 \r
 247         self.username = self.email
 248         super(User, self).save(*args, **kwds)
 249
 250         self._initial = self._dict
 251
 252     def send_temporary_password(self):
 253         password = User.objects.make_random_password()
 254         self.set_password(password)\r
 255         subject, from_email, to = 'OpenCloud Account Credentials', 'support@opencloud.us', str(self.email)\r
 256         text_content = 'This is an important message.'\r
 257         userUrl="http://%s/" % get_request().get_host()\r
 258         html_content = """<p>Your account has been created on OpenCloud. Please log in <a href="""+userUrl+""">here</a> to activate your account<br><br>Username: """+self.email+"""<br>Temporary Password: """+password+"""<br>Please change your password once you successully login into the site.</p>"""\r
 259         msg = EmailMultiAlternatives(subject,text_content, from_email, [to])\r
 260         msg.attach_alternative(html_content, "text/html")\r
 261         msg.send()
 262
 263     def can_update(self, user):
 264         from core.models import SitePrivilege
 265         _cant_update_fieldName = None
 266         if user.is_readonly:
 267             return False
 268         if user.is_admin:
 269             return True
 270         # site pis can update
 271         site_privs = SitePrivilege.objects.filter(user=user, site=self.site)
 272         for site_priv in site_privs:
 273             if site_priv.role.role == 'pi':
 274                 for fieldName in self.diff.keys():
 275                     if fieldName in self.PI_FORBIDDEN_FIELDS:
 276                         _cant_update_fieldName = fieldName
 277                         return False
 278                 return True
 279         if (user.id == self.id):
 280             for fieldName in self.diff.keys():
 281                 if fieldName in self.USER_FORBIDDEN_FIELDS:
 282                     _cant_update_fieldName = fieldName
 283                     return False
 284             return True
 285
 286         return False
 287
 288     @staticmethod
 289     def select_by_user(user):
 290         if user.is_admin:
 291             qs = User.objects.all()
 292         else:
 293             # can see all users at any site where this user has pi role
 294             from core.models.site import SitePrivilege
 295             site_privs = SitePrivilege.objects.filter(user=user)
 296             sites = [sp.site for sp in site_privs if sp.role.role == 'pi']
 297             # get site privs of users at these sites
 298             site_privs = SitePrivilege.objects.filter(site__in=sites)
 299             user_ids = [sp.user.id for sp in site_privs] + [user.id]
 300             qs = User.objects.filter(Q(site__in=sites) | Q(id__in=user_ids))
 301         return qs
 302
 303     def save_by_user(self, user, *args, **kwds):
 304         if not self.can_update(user):
 305             if getattr(self, "_cant_update_fieldName", None) is not None:
 306                 raise PermissionDenied("You do not have permission to update field %s on object %s" % (self._cant_update_fieldName, self.__class__.__name__))
 307             else:
 308                 raise PermissionDenied("You do not have permission to update %s objects" % self.__class__.__name__)
 309
 310         self.save(*args, **kwds)
 311
 312     def delete_by_user(self, user, *args, **kwds):
 313         if not self.can_update(user):
 314             raise PermissionDenied("You do not have permission to delete %s objects" % self.__class__.__name__)
 315         self.delete(*args, **kwds)
 316
 317 class UserDashboardView(PlCoreBase):
 318      user = models.ForeignKey(User, related_name='userdashboardviews')
 319      dashboardView = models.ForeignKey(DashboardView, related_name='userdashboardviews')
 320      order = models.IntegerField(default=0)