Mercurial Repository: p/roundup/code: roundup/cgi/actions.py comparison

comparison roundup/cgi/actions.py @ 2032:5a7ec0c63095

fixes to some unit tests, and a cleanup

author	Richard Jones <richard@users.sourceforge.net>
date	Fri, 20 Feb 2004 03:48:16 +0000
parents	bcb21e5722b8
children	d124af927369

comparison

equal deleted inserted replaced

-:bcb21e5722b8
+:5a7ec0c63095
 'NewItemAction']
 # used by a couple of routines
 chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789'
 class Action:
 def __init__(self, client):
 self.client = client
 self.form = client.form
 self.db = client.db
 self.nodeid = client.nodeid
 self.template = client.template
 self.classname = client.classname
 self.userid = client.userid
 self.base = client.base
 self.user = client.user
 def execute(self):
 """Execute the action specified by this object."""
 self.permission()
 self.handle()
 True by default. If the permissionType attribute is a string containing
 a simple permission, check whether the user has that permission.
 Subclasses must also define the name attribute if they define
 permissionType.
 Despite having this permission, users may still be unauthorised to
 perform parts of actions. It is up to the subclasses to detect this.
 """
 if (self.permissionType and
 not self.hasPermission(self.permissionType)):
+info = {'action': self.name, 'classname': self.classname}
-raise Unauthorised, _('You do not have permission to %s the %s class.' %
+raise Unauthorised, _('You do not have permission to '
-(self.name, self.classname))
+'%(action)s the %(classname)s class.')%info
 def hasPermission(self, permission):
 """Check whether the user has 'permission' on the current class."""
 return self.db.security.hasPermission(permission, self.client.userid,
 self.client.classname)
 class ShowAction(Action):
 def handle(self, typere=re.compile('[@:]type'),
 numre=re.compile('[@:]number')):
 """Show a node of a particular class/id."""
 class RetireAction(Action):
 name = 'retire'
 permissionType = 'Edit'
 def handle(self):
 """Retire the context item."""
 # if we want to view the index template now, then unset the nodeid
 # context info (a special-case for retire actions on the index page)
 nodeid = self.nodeid
 if self.template == 'index':
 self.client.nodeid = None
 'classname': self.classname.capitalize(), 'itemid': nodeid})
 class SearchAction(Action):
 name = 'search'
 permissionType = 'View'
 def handle(self, wcre=re.compile(r'[\s,]+')):
 """Mangle some of the form variables.
 Set the form ":filter" variable based on the values of the filter
 variables - if they're set to anything other than "dontcare" then add
 Split any String query values on whitespace and comma.
 """
 self.fakeFilterVars()
 queryname = self.getQueryName()
 # handle saving the query params
 if queryname:
 # parse the environment and figure what the query _is_
 req = templating.HTMLRequest(self.client)
 if len(l) > 1 or l[0] != v:
 self.form.value.remove(self.form[key])
 # replace the single value with the split list
 for v in l:
 self.form.value.append(cgi.MiniFieldStorage(key, v))
 self.form.value.append(cgi.MiniFieldStorage('@filter', key))
 FV_QUERYNAME = re.compile(r'[@:]queryname')
 def getQueryName(self):
 for key in self.form.keys():
 return ''
 class EditCSVAction(Action):
 name = 'edit'
 permissionType = 'Edit'
 def handle(self):
 """Performs an edit of all of a class' items in one go.
 The "rows" CGI var defines the CSV-formatted entries for the class. New
 nodes are identified by the ID 'X' (or any other non-existent ID) and
 # all OK
 self.db.commit()
 self.client.ok_message.append(_('Items edited OK'))
 class _EditAction(Action):
 def isEditingSelf(self):
 """Check whether a user is editing his/her own details."""
 return (self.nodeid == self.userid
 and self.db.user.get(self.nodeid, 'username') != 'anonymous')
 def editItemPermission(self, props):
 """Determine whether the user has permission to edit this item.
 Base behaviour is to check the user can edit this class. If we're
 editing the "user" class, users are allowed to edit their own details.
 if userActivity:
 return userActivity < nodeActivity
 def handleCollision(self):
 self.client.template = 'collision'
 def handle(self):
 """Perform an edit of an item in the database.
 See parsePropsFromForm and _editnodes for special variables.
 """
 if self.detectCollision(self.lastUserActivity(), self.lastNodeActivity()):
 self.handleCollision()
 return
 urllib.quote(self.template))
 if self.nodeid is None:
 req = templating.HTMLRequest(self)
 url += '&' + req.indexargs_href('', {})[1:]
 raise Redirect, url
 class NewItemAction(_EditAction):
 def handle(self):
 ''' Add a new item to the database.
 This follows the same form as the EditItemAction, with the same
 # redirect to the new item's page
 raise Redirect, '%s%s%s?@ok_message=%s&@template=%s'%(self.base,
 self.classname, self.nodeid, urllib.quote(messages),
 urllib.quote(self.template))
 class PassResetAction(Action):
 def handle(self):
 """Handle password reset requests.
 Presence of either "name" or "address" generates email. Presence of
 "otk" performs the reset.
 """
 if self.form.has_key('otk'):
 # pull the rego information out of the otk database
 otk = self.form['otk'].value
 uid = self.db.otks.get(otk, 'uid')
 # pull the rego information out of the otk database
 self.userid = self.db.confirm_registration(self.form['otk'].value)
 except (ValueError, KeyError), message:
 self.client.error_message.append(str(message))
 return
 # log the new user in
 self.client.user = self.db.user.get(self.userid, 'username')
 # re-open the database for real, using the user
 self.client.opendb(self.client.user)
 self.userid, urllib.quote(message))
 class RegisterAction(Action):
 name = 'register'
 permissionType = 'Web Registration'
 def handle(self):
 """Attempt to create a new user based on the contents of the form
 and then set the cookie.
 Return 1 on successful login.
 """
 props = self.client.parsePropsFromForm(create=1)[0][('user', None)]
 # registration isn't allowed to supply roles
 if props.has_key('roles'):
 raise Unauthorised, _("It is not permitted to supply roles "
 "at registration.")
 username = props['username']
 try:
 self.db.user.lookup(username)
 self.client.error_message.append(_('Error: A user with the '

Mercurial > p > roundup > code

comparison roundup/cgi/actions.py @ 2032:5a7ec0c63095