|
|
# -*- coding: utf-8 -*-
|
|
|
"""
|
|
|
rhodecode.model.user
|
|
|
~~~~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
users model for RhodeCode
|
|
|
|
|
|
:created_on: Apr 9, 2010
|
|
|
:author: marcink
|
|
|
:copyright: (C) 2009-2011 Marcin Kuzminski <marcin@python-works.com>
|
|
|
:license: GPLv3, see COPYING for more details.
|
|
|
"""
|
|
|
# This program is free software; you can redistribute it and/or
|
|
|
# modify it under the terms of the GNU General Public License
|
|
|
# as published by the Free Software Foundation; version 2
|
|
|
# of the License or (at your opinion) any later version of the license.
|
|
|
#
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
# GNU General Public License for more details.
|
|
|
#
|
|
|
# You should have received a copy of the GNU General Public License
|
|
|
# along with this program; if not, write to the Free Software
|
|
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
|
|
|
# MA 02110-1301, USA.
|
|
|
|
|
|
import logging
|
|
|
import traceback
|
|
|
|
|
|
from pylons.i18n.translation import _
|
|
|
|
|
|
from rhodecode.model import BaseModel
|
|
|
from rhodecode.model.caching_query import FromCache
|
|
|
from rhodecode.model.db import User
|
|
|
|
|
|
from rhodecode.lib.exceptions import DefaultUserException, UserOwnsReposException
|
|
|
|
|
|
from sqlalchemy.exc import DatabaseError
|
|
|
from rhodecode.lib import generate_api_key
|
|
|
|
|
|
log = logging.getLogger(__name__)
|
|
|
|
|
|
class UserModel(BaseModel):
|
|
|
|
|
|
def get(self, user_id, cache=False):
|
|
|
user = self.sa.query(User)
|
|
|
if cache:
|
|
|
user = user.options(FromCache("sql_cache_short",
|
|
|
"get_user_%s" % user_id))
|
|
|
return user.get(user_id)
|
|
|
|
|
|
|
|
|
def get_by_username(self, username, cache=False, case_insensitive=False):
|
|
|
|
|
|
if case_insensitive:
|
|
|
user = self.sa.query(User).filter(User.username.ilike(username))
|
|
|
else:
|
|
|
user = self.sa.query(User)\
|
|
|
.filter(User.username == username)
|
|
|
if cache:
|
|
|
user = user.options(FromCache("sql_cache_short",
|
|
|
"get_user_%s" % username))
|
|
|
return user.scalar()
|
|
|
|
|
|
def create(self, form_data):
|
|
|
try:
|
|
|
new_user = User()
|
|
|
for k, v in form_data.items():
|
|
|
setattr(new_user, k, v)
|
|
|
|
|
|
new_user.api_key = generate_api_key(form_data['username'])
|
|
|
self.sa.add(new_user)
|
|
|
self.sa.commit()
|
|
|
except:
|
|
|
log.error(traceback.format_exc())
|
|
|
self.sa.rollback()
|
|
|
raise
|
|
|
|
|
|
def create_ldap(self, username, password, user_dn, attrs):
|
|
|
"""
|
|
|
Checks if user is in database, if not creates this user marked
|
|
|
as ldap user
|
|
|
:param username:
|
|
|
:param password:
|
|
|
:param user_dn:
|
|
|
:param attrs:
|
|
|
"""
|
|
|
from rhodecode.lib.auth import get_crypt_password
|
|
|
log.debug('Checking for such ldap account in RhodeCode database')
|
|
|
if self.get_by_username(username, case_insensitive=True) is None:
|
|
|
try:
|
|
|
new_user = User()
|
|
|
new_user.username = username.lower() # add ldap account always lowercase
|
|
|
new_user.password = get_crypt_password(password)
|
|
|
new_user.api_key = generate_api_key(username)
|
|
|
new_user.email = attrs['email']
|
|
|
new_user.active = True
|
|
|
new_user.ldap_dn = user_dn
|
|
|
new_user.name = attrs['name']
|
|
|
new_user.lastname = attrs['lastname']
|
|
|
|
|
|
|
|
|
self.sa.add(new_user)
|
|
|
self.sa.commit()
|
|
|
return True
|
|
|
except (DatabaseError,):
|
|
|
log.error(traceback.format_exc())
|
|
|
self.sa.rollback()
|
|
|
raise
|
|
|
log.debug('this %s user exists skipping creation of ldap account',
|
|
|
username)
|
|
|
return False
|
|
|
|
|
|
def create_registration(self, form_data):
|
|
|
from rhodecode.lib.celerylib import tasks, run_task
|
|
|
try:
|
|
|
new_user = User()
|
|
|
for k, v in form_data.items():
|
|
|
if k != 'admin':
|
|
|
setattr(new_user, k, v)
|
|
|
|
|
|
self.sa.add(new_user)
|
|
|
self.sa.commit()
|
|
|
body = ('New user registration\n'
|
|
|
'username: %s\n'
|
|
|
'email: %s\n')
|
|
|
body = body % (form_data['username'], form_data['email'])
|
|
|
|
|
|
run_task(tasks.send_email, None,
|
|
|
_('[RhodeCode] New User registration'),
|
|
|
body)
|
|
|
except:
|
|
|
log.error(traceback.format_exc())
|
|
|
self.sa.rollback()
|
|
|
raise
|
|
|
|
|
|
def update(self, user_id, form_data):
|
|
|
try:
|
|
|
user = self.get(user_id, cache=False)
|
|
|
if user.username == 'default':
|
|
|
raise DefaultUserException(
|
|
|
_("You can't Edit this user since it's"
|
|
|
" crucial for entire application"))
|
|
|
|
|
|
for k, v in form_data.items():
|
|
|
if k == 'new_password' and v != '':
|
|
|
user.password = v
|
|
|
user.api_key = generate_api_key(user.username)
|
|
|
else:
|
|
|
setattr(user, k, v)
|
|
|
|
|
|
self.sa.add(user)
|
|
|
self.sa.commit()
|
|
|
except:
|
|
|
log.error(traceback.format_exc())
|
|
|
self.sa.rollback()
|
|
|
raise
|
|
|
|
|
|
def update_my_account(self, user_id, form_data):
|
|
|
try:
|
|
|
user = self.get(user_id, cache=False)
|
|
|
if user.username == 'default':
|
|
|
raise DefaultUserException(
|
|
|
_("You can't Edit this user since it's"
|
|
|
" crucial for entire application"))
|
|
|
for k, v in form_data.items():
|
|
|
if k == 'new_password' and v != '':
|
|
|
user.password = v
|
|
|
user.api_key = generate_api_key(user.username)
|
|
|
else:
|
|
|
if k not in ['admin', 'active']:
|
|
|
setattr(user, k, v)
|
|
|
|
|
|
self.sa.add(user)
|
|
|
self.sa.commit()
|
|
|
except:
|
|
|
log.error(traceback.format_exc())
|
|
|
self.sa.rollback()
|
|
|
raise
|
|
|
|
|
|
def delete(self, user_id):
|
|
|
try:
|
|
|
user = self.get(user_id, cache=False)
|
|
|
if user.username == 'default':
|
|
|
raise DefaultUserException(
|
|
|
_("You can't remove this user since it's"
|
|
|
" crucial for entire application"))
|
|
|
if user.repositories:
|
|
|
raise UserOwnsReposException(_('This user still owns %s '
|
|
|
'repositories and cannot be '
|
|
|
'removed. Switch owners or '
|
|
|
'remove those repositories') \
|
|
|
% user.repositories)
|
|
|
self.sa.delete(user)
|
|
|
self.sa.commit()
|
|
|
except:
|
|
|
log.error(traceback.format_exc())
|
|
|
self.sa.rollback()
|
|
|
raise
|
|
|
|
|
|
def reset_password(self, data):
|
|
|
from rhodecode.lib.celerylib import tasks, run_task
|
|
|
run_task(tasks.reset_user_password, data['email'])
|
|
|
|
|
|
|
|
|
def fill_data(self, user):
|
|
|
"""
|
|
|
Fills user data with those from database and log out user if not
|
|
|
present in database
|
|
|
:param user:
|
|
|
"""
|
|
|
|
|
|
if not hasattr(user, 'user_id') or user.user_id is None:
|
|
|
raise Exception('passed in user has to have the user_id attribute')
|
|
|
|
|
|
|
|
|
log.debug('filling auth user data')
|
|
|
try:
|
|
|
dbuser = self.get(user.user_id)
|
|
|
user.username = dbuser.username
|
|
|
user.is_admin = dbuser.admin
|
|
|
user.name = dbuser.name
|
|
|
user.lastname = dbuser.lastname
|
|
|
user.email = dbuser.email
|
|
|
except:
|
|
|
log.error(traceback.format_exc())
|
|
|
user.is_authenticated = False
|
|
|
|
|
|
return user
|
|
|
|
