users.py
114 lines
| 3.7 KiB
| text/x-python
|
PythonLexer
|
r47 | import logging | ||
from pylons import request, response, session, tmpl_context as c, url, app_globals as g | ||||
from pylons.controllers.util import abort, redirect | ||||
from pylons_app.lib.base import BaseController, render | ||||
|
r49 | from formencode import htmlfill | ||
from pylons_app.model import meta | ||||
from pylons_app.model.db import Users, UserLogs | ||||
r52 | from pylons_app.lib.auth import authenticate | |||
|
r50 | import crypt | ||
r52 | ||||
|
r47 | log = logging.getLogger(__name__) | ||
class UsersController(BaseController): | ||||
"""REST Controller styled on the Atom Publishing Protocol""" | ||||
# To properly map this controller, ensure your config/routing.py | ||||
# file has a resource setup: | ||||
# map.resource('user', 'users') | ||||
|
r50 | |||
r52 | @authenticate | |||
|
r47 | def __before__(self): | ||
r101 | ||||
|
r47 | c.admin_user = session.get('admin_user') | ||
c.admin_username = session.get('admin_username') | ||||
|
r49 | self.sa = meta.Session | ||
|
r47 | |||
def index(self, format='html'): | ||||
"""GET /users: All items in the collection""" | ||||
# url('users') | ||||
|
r48 | |||
|
r49 | c.users_list = self.sa.query(Users).all() | ||
r127 | return render('admin/users/users.html') | |||
|
r47 | |||
def create(self): | ||||
"""POST /users: Create a new item""" | ||||
# url('users') | ||||
|
r50 | params = dict(request.params) | ||
|
r47 | |||
|
r50 | try: | ||
new_user = Users() | ||||
new_user.active = params.get('active', False) | ||||
new_user.username = params.get('username') | ||||
new_user.password = crypt.crypt(params.get('password'), '6a') | ||||
new_user.admin = False | ||||
self.sa.add(new_user) | ||||
self.sa.commit() | ||||
except: | ||||
self.sa.rollback() | ||||
raise | ||||
return redirect(url('users')) | ||||
|
r47 | def new(self, format='html'): | ||
"""GET /users/new: Form to create a new item""" | ||||
# url('new_user') | ||||
r127 | return render('admin/users/user_add.html') | |||
|
r47 | |||
def update(self, id): | ||||
"""PUT /users/id: Update an existing item""" | ||||
# Forms posted to this method should contain a hidden field: | ||||
# <input type="hidden" name="_method" value="PUT" /> | ||||
# Or using helpers: | ||||
# h.form(url('user', id=ID), | ||||
# method='put') | ||||
# url('user', id=ID) | ||||
|
r50 | params = dict(request.params) | ||
|
r47 | |||
|
r50 | try: | ||
new_user = self.sa.query(Users).get(id) | ||||
|
r65 | new_user.active = params.get('active', False) | ||
|
r50 | new_user.username = params.get('username') | ||
if params.get('new_password'): | ||||
new_user.password = crypt.crypt(params.get('new_password'), '6a') | ||||
self.sa.add(new_user) | ||||
self.sa.commit() | ||||
except: | ||||
self.sa.rollback() | ||||
raise | ||||
return redirect(url('users')) | ||||
|
r47 | def delete(self, id): | ||
"""DELETE /users/id: Delete an existing item""" | ||||
# Forms posted to this method should contain a hidden field: | ||||
# <input type="hidden" name="_method" value="DELETE" /> | ||||
# Or using helpers: | ||||
# h.form(url('user', id=ID), | ||||
# method='delete') | ||||
# url('user', id=ID) | ||||
|
r48 | try: | ||
|
r49 | self.sa.delete(self.sa.query(Users).get(id)) | ||
self.sa.commit() | ||||
|
r48 | except: | ||
|
r49 | self.sa.rollback() | ||
|
r48 | raise | ||
return redirect(url('users')) | ||||
|
r47 | def show(self, id, format='html'): | ||
"""GET /users/id: Show a specific item""" | ||||
# url('user', id=ID) | ||||
|
r50 | |||
|
r48 | |||
|
r47 | def edit(self, id, format='html'): | ||
"""GET /users/id/edit: Form to edit an existing item""" | ||||
# url('edit_user', id=ID) | ||||
|
r50 | c.user = self.sa.query(Users).get(id) | ||
|
r70 | defaults = c.user.__dict__ | ||
|
r50 | return htmlfill.render( | ||
r127 | render('admin/users/user_edit.html'), | |||
|
r70 | defaults=defaults, | ||
|
r50 | encoding="UTF-8", | ||
force_defaults=False | ||||
) | ||||