##// END OF EJS Templates
security bugfix: protected feeds, from unauthorized access, even without this, the feeds would crash and were unreadable, But proper way of securing it is with the secure decarators.
security bugfix: protected feeds, from unauthorized access, even without this, the feeds would crash and were unreadable, But proper way of securing it is with the secure decarators.

File last commit:

r861:fd2ea6ce beta
r862:4bdd0bf1 beta
Show More
journal.py
97 lines | 3.2 KiB | text/x-python | PythonLexer
updated docs on every controller
r861 # -*- coding: utf-8 -*-
"""
rhodecode.controllers.journal
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Journal controller for pylons
:created_on: Nov 21, 2010
:author: marcink
:copyright: (C) 2009-2010 Marcin Kuzminski <marcin@python-works.com>
:license: GPLv3, see COPYING for more details.
"""
implemented user dashboards, and following system.
r734 # This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; version 2
# of the License or (at your opinion) any later version of the license.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
# MA 02110-1301, USA.
updated docs on every controller
r861
import logging
from sqlalchemy import or_
implemented user dashboards, and following system.
r734
from pylons import request, response, session, tmpl_context as c, url
updated docs on every controller
r861
disabled journal for anonymous users
r793 from rhodecode.lib.auth import LoginRequired, NotAnonymous
implemented user dashboards, and following system.
r734 from rhodecode.lib.base import BaseController, render
from rhodecode.lib.helpers import get_token
from rhodecode.model.db import UserLog, UserFollowing
from rhodecode.model.scm import ScmModel
updated docs on every controller
r861
from paste.httpexceptions import HTTPInternalServerError
implemented user dashboards, and following system.
r734
log = logging.getLogger(__name__)
class JournalController(BaseController):
@LoginRequired()
disabled journal for anonymous users
r793 @NotAnonymous()
implemented user dashboards, and following system.
r734 def __before__(self):
super(JournalController, self).__before__()
def index(self):
# Return a rendered template
c.following = self.sa.query(UserFollowing)\
.filter(UserFollowing.user_id == c.rhodecode_user.user_id).all()
disabled journal for anonymous users
r793
repo_ids = [x.follows_repository.repo_id for x in c.following
activated filters for user journal for following users/repos only
r736 if x.follows_repository is not None]
disabled journal for anonymous users
r793 user_ids = [x.follows_user.user_id for x in c.following
activated filters for user journal for following users/repos only
r736 if x.follows_user is not None]
disabled journal for anonymous users
r793
implemented user dashboards, and following system.
r734 c.journal = self.sa.query(UserLog)\
activated filters for user journal for following users/repos only
r736 .filter(or_(
UserLog.repository_id.in_(repo_ids),
UserLog.user_id.in_(user_ids),
))\
implemented user dashboards, and following system.
r734 .order_by(UserLog.action_date.desc())\
added limit for user journal
r738 .limit(20)\
implemented user dashboards, and following system.
r734 .all()
return render('/journal.html')
def toggle_following(self):
if request.POST.get('auth_token') == get_token():
scm_model = ScmModel()
user_id = request.POST.get('follows_user_id')
if user_id:
try:
scm_model.toggle_following_user(user_id,
c.rhodecode_user.user_id)
return 'ok'
except:
raise HTTPInternalServerError()
repo_id = request.POST.get('follows_repo_id')
if repo_id:
try:
scm_model.toggle_following_repo(repo_id,
c.rhodecode_user.user_id)
return 'ok'
except:
raise HTTPInternalServerError()
raise HTTPInternalServerError()