SSH: disable visually support ssh keys if we have them disabled in the .ini

rhodecode/apps/my_account/views/my_account_ssh_keys.py

@@ -1,151 +1,154 b''
 # -*- coding: utf-8 -*-
 
 # Copyright (C) 2016-2017 RhodeCode GmbH
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Affero General Public License, version 3
 # (only), as published by the Free Software Foundation.
 #
 # This program is distributed in the hope that it will be useful,
 # but WITHOUT ANY WARRANTY; without even the implied warranty of
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 #
 # You should have received a copy of the GNU Affero General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
 #
 # This program is dual-licensed. If you wish to learn more about the
 # RhodeCode Enterprise Edition, including its added features, Support services,
 # and proprietary license terms, please see https://rhodecode.com/licenses/
 
 import logging
 
 from pyramid.httpexceptions import HTTPFound
 from pyramid.view import view_config
 
 from rhodecode.apps._base import BaseAppView, DataGridAppView
 from rhodecode.apps.ssh_support import SshKeyFileChangeEvent
 from rhodecode.events import trigger
 from rhodecode.lib import helpers as h
 from rhodecode.lib import audit_logger
 from rhodecode.lib.auth import LoginRequired, NotAnonymous, CSRFRequired
 from rhodecode.model.db import IntegrityError, UserSshKeys
 from rhodecode.model.meta import Session
 from rhodecode.model.ssh_key import SshKeyModel
 
 log = logging.getLogger(__name__)
 
 
 class MyAccountSshKeysView(BaseAppView, DataGridAppView):
 
     def load_default_context(self):
         c = self._get_local_tmpl_context()
         c.user = c.auth_user.get_instance()
+
+        c.ssh_enabled = self.request.registry.settings.get(
+            'ssh.generate_authorized_keyfile')
         self._register_global_c(c)
         return c
 
     @LoginRequired()
     @NotAnonymous()
     @view_config(
         route_name='my_account_ssh_keys', request_method='GET',
         renderer='rhodecode:templates/admin/my_account/my_account.mako')
     def my_account_ssh_keys(self):
         _ = self.request.translate
 
         c = self.load_default_context()
         c.active = 'ssh_keys'
         c.default_key = self.request.GET.get('default_key')
         c.user_ssh_keys = SshKeyModel().get_ssh_keys(c.user.user_id)
         return self._get_template_context(c)
 
     @LoginRequired()
     @NotAnonymous()
     @view_config(
         route_name='my_account_ssh_keys_generate', request_method='GET',
         renderer='rhodecode:templates/admin/my_account/my_account.mako')
     def ssh_keys_generate_keypair(self):
         _ = self.request.translate
         c = self.load_default_context()
 
         c.active = 'ssh_keys_generate'
         comment = 'RhodeCode-SSH {}'.format(c.user.email or '')
         c.private, c.public = SshKeyModel().generate_keypair(comment=comment)
         c.target_form_url = h.route_path(
             'my_account_ssh_keys', _query=dict(default_key=c.public))
         return self._get_template_context(c)
 
     @LoginRequired()
     @NotAnonymous()
     @CSRFRequired()
     @view_config(
         route_name='my_account_ssh_keys_add', request_method='POST',)
     def my_account_ssh_keys_add(self):
         _ = self.request.translate
         c = self.load_default_context()
 
         user_data = c.user.get_api_data()
         key_data = self.request.POST.get('key_data')
         description = self.request.POST.get('description')
 
         try:
             if not key_data:
                 raise ValueError('Please add a valid public key')
 
             key = SshKeyModel().parse_key(key_data.strip())
             fingerprint = key.hash_md5()
 
             ssh_key = SshKeyModel().create(
                 c.user.user_id, fingerprint, key_data, description)
             ssh_key_data = ssh_key.get_api_data()
 
             audit_logger.store_web(
                 'user.edit.ssh_key.add', action_data={
                     'data': {'ssh_key': ssh_key_data, 'user': user_data}},
                 user=self._rhodecode_user, )
             Session().commit()
 
             # Trigger an event on change of keys.
             trigger(SshKeyFileChangeEvent(), self.request.registry)
 
             h.flash(_("Ssh Key successfully created"), category='success')
 
         except IntegrityError:
             log.exception("Exception during ssh key saving")
             h.flash(_('An error occurred during ssh key saving: {}').format(
                 'Such key already exists, please use a different one'),
                     category='error')
         except Exception as e:
             log.exception("Exception during ssh key saving")
             h.flash(_('An error occurred during ssh key saving: {}').format(e),
                     category='error')
 
         return HTTPFound(h.route_path('my_account_ssh_keys'))
 
     @LoginRequired()
     @NotAnonymous()
     @CSRFRequired()
     @view_config(
         route_name='my_account_ssh_keys_delete', request_method='POST')
     def my_account_ssh_keys_delete(self):
         _ = self.request.translate
         c = self.load_default_context()
 
         user_data = c.user.get_api_data()
 
         del_ssh_key = self.request.POST.get('del_ssh_key')
 
         if del_ssh_key:
             ssh_key = UserSshKeys.get_or_404(del_ssh_key)
             ssh_key_data = ssh_key.get_api_data()
 
             SshKeyModel().delete(del_ssh_key, c.user.user_id)
             audit_logger.store_web(
                 'user.edit.ssh_key.delete', action_data={
                     'data': {'ssh_key': ssh_key_data, 'user': user_data}},
                 user=self._rhodecode_user,)
             Session().commit()
             # Trigger an event on change of keys.
             trigger(SshKeyFileChangeEvent(), self.request.registry)
             h.flash(_("Ssh key successfully deleted"), category='success')
 
         return HTTPFound(h.route_path('my_account_ssh_keys'))

rhodecode/templates/admin/my_account/my_account_ssh_keys.mako

@@ -1,78 +1,84 b''
 <div class="panel panel-default">
     <div class="panel-heading">
       <h3 class="panel-title">${_('SSH Keys')}</h3>
     </div>
     <div class="panel-body">
         <div class="sshkeys_wrap">
           <table class="rctable ssh_keys">
             <tr>
                 <th>${_('Fingerprint')}</th>
                 <th>${_('Description')}</th>
                 <th>${_('Created')}</th>
                 <th>${_('Action')}</th>
             </tr>
-            %if c.user_ssh_keys:
-                %for ssh_key in c.user_ssh_keys:
-                  <tr class="">
-                    <td class="">
-                        <code>${ssh_key.ssh_key_fingerprint}</code>
-                    </td>
-                    <td class="td-wrap">${ssh_key.description}</td>
-                    <td class="td-tags">${h.format_date(ssh_key.created_on)}</td>
+            % if not c.ssh_enabled:
+                <tr><td colspan="4"><div class="">${_('SSH Keys usage is currently disabled, please ask your administrator to enable them.')}</div></td></tr>
+            % else:
+                %if c.user_ssh_keys:
+                    %for ssh_key in c.user_ssh_keys:
+                      <tr class="">
+                        <td class="">
+                            <code>${ssh_key.ssh_key_fingerprint}</code>
+                        </td>
+                        <td class="td-wrap">${ssh_key.description}</td>
+                        <td class="td-tags">${h.format_date(ssh_key.created_on)}</td>
 
-                    <td class="td-action">
-                        ${h.secure_form(h.route_path('my_account_ssh_keys_delete'), method='POST', request=request)}
-                            ${h.hidden('del_ssh_key', ssh_key.ssh_key_id)}
-                            <button class="btn btn-link btn-danger" type="submit"
-                                    onclick="return confirm('${_('Confirm to remove ssh key %s') % ssh_key.ssh_key_fingerprint}');">
-                                ${_('Delete')}
-                            </button>
-                        ${h.end_form()}
-                    </td>
-                  </tr>
-                %endfor
-            %else:
-            <tr><td><div class="ip">${_('No additional ssh keys specified')}</div></td></tr>
-            %endif
+                        <td class="td-action">
+                            ${h.secure_form(h.route_path('my_account_ssh_keys_delete'), method='POST', request=request)}
+                                ${h.hidden('del_ssh_key', ssh_key.ssh_key_id)}
+                                <button class="btn btn-link btn-danger" type="submit"
+                                        onclick="return confirm('${_('Confirm to remove ssh key %s') % ssh_key.ssh_key_fingerprint}');">
+                                    ${_('Delete')}
+                                </button>
+                            ${h.end_form()}
+                        </td>
+                      </tr>
+                    %endfor
+                %else:
+                <tr><td colspan="4"><div class="">${_('No additional ssh keys specified')}</div></td></tr>
+                %endif
+            % endif
           </table>
         </div>
 
+        % if c.ssh_enabled:
         <div class="user_ssh_keys">
             ${h.secure_form(h.route_path('my_account_ssh_keys_add'), method='POST', request=request)}
             <div class="form form-vertical">
                 <!-- fields -->
                 <div class="fields">
                     <div class="field">
                         <div class="label">
                             <label for="new_email">${_('New ssh key')}:</label>
                         </div>
                         <div class="input">
                             ${h.text('description', class_='medium', placeholder=_('Description'))}
                             <a href="${h.route_path('my_account_ssh_keys_generate')}">${_('Generate random RSA key')}</a>
                         </div>
                      </div>
 
                     <div class="field">
                         <div class="textarea text-area editor">
                             ${h.textarea('key_data',c.default_key, size=30, placeholder=_("Public key, begins with 'ssh-rsa', 'ssh-dss', 'ssh-ed25519', 'ecdsa-sha2-nistp256', 'ecdsa-sha2-nistp384', or 'ecdsa-sha2-nistp521'"))}
                         </div>
                     </div>
 
                     <div class="buttons">
                       ${h.submit('save',_('Add'),class_="btn")}
                       ${h.reset('reset',_('Reset'),class_="btn")}
                     </div>
                 </div>
             </div>
             ${h.end_form()}
         </div>
+        % endif
     </div>
 </div>
 
 <script>
 
 $(document).ready(function(){
 
 
 });
 </script>