2020-12-10 12:37:15 +01:00
|
|
|
# ContentDB
|
2021-01-30 17:59:42 +01:00
|
|
|
# Copyright (C) 2018-21 rubenwardy
|
2020-12-10 12:37:15 +01:00
|
|
|
#
|
|
|
|
# This program is free software: you can redistribute it and/or modify
|
2021-01-30 17:59:42 +01:00
|
|
|
# it under the terms of the GNU Affero General Public License as published by
|
2020-12-10 12:37:15 +01:00
|
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
|
|
# (at your option) any later version.
|
|
|
|
#
|
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
2021-01-30 17:59:42 +01:00
|
|
|
# GNU Affero General Public License for more details.
|
2020-12-10 12:37:15 +01:00
|
|
|
#
|
2021-01-30 17:59:42 +01:00
|
|
|
# You should have received a copy of the GNU Affero General Public License
|
2020-12-10 12:37:15 +01:00
|
|
|
# along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
|
|
|
|
|
|
|
|
|
|
from flask_migrate import Migrate
|
|
|
|
from flask_sqlalchemy import SQLAlchemy
|
|
|
|
from sqlalchemy_searchable import make_searchable
|
|
|
|
|
|
|
|
from app import app
|
|
|
|
|
|
|
|
# Initialise database
|
|
|
|
|
|
|
|
db = SQLAlchemy(app)
|
|
|
|
migrate = Migrate(app, db)
|
|
|
|
make_searchable(db.metadata)
|
|
|
|
|
|
|
|
|
|
|
|
from .packages import *
|
|
|
|
from .users import *
|
|
|
|
from .threads import *
|
|
|
|
|
|
|
|
|
|
|
|
class APIToken(db.Model):
|
|
|
|
id = db.Column(db.Integer, primary_key=True)
|
2020-12-10 17:49:37 +01:00
|
|
|
access_token = db.Column(db.String(34), unique=True, nullable=False)
|
2020-12-10 12:37:15 +01:00
|
|
|
|
|
|
|
name = db.Column(db.String(100), nullable=False)
|
2020-12-10 17:49:37 +01:00
|
|
|
|
2020-12-10 12:37:15 +01:00
|
|
|
owner_id = db.Column(db.Integer, db.ForeignKey("user.id"), nullable=False)
|
2020-12-10 17:49:37 +01:00
|
|
|
owner = db.relationship("User", foreign_keys=[owner_id], back_populates="tokens")
|
2020-12-10 12:37:15 +01:00
|
|
|
|
|
|
|
created_at = db.Column(db.DateTime, nullable=False, default=datetime.datetime.utcnow)
|
|
|
|
|
|
|
|
package_id = db.Column(db.Integer, db.ForeignKey("package.id"), nullable=True)
|
2020-12-10 17:49:37 +01:00
|
|
|
package = db.relationship("Package", foreign_keys=[package_id], back_populates="tokens")
|
2020-12-10 12:37:15 +01:00
|
|
|
|
|
|
|
def canOperateOnPackage(self, package):
|
|
|
|
if self.package and self.package != package:
|
|
|
|
return False
|
|
|
|
|
|
|
|
return package.author == self.owner
|
|
|
|
|
|
|
|
|
|
|
|
class AuditSeverity(enum.Enum):
|
|
|
|
NORMAL = 0 # Normal user changes
|
|
|
|
USER = 1 # Security user changes
|
|
|
|
EDITOR = 2 # Editor changes
|
|
|
|
MODERATION = 3 # Destructive / moderator changes
|
|
|
|
|
|
|
|
def __str__(self):
|
|
|
|
return self.name
|
|
|
|
|
|
|
|
def getTitle(self):
|
|
|
|
return self.name.replace("_", " ").title()
|
|
|
|
|
|
|
|
@classmethod
|
|
|
|
def choices(cls):
|
|
|
|
return [(choice, choice.getTitle()) for choice in cls]
|
|
|
|
|
|
|
|
@classmethod
|
|
|
|
def coerce(cls, item):
|
|
|
|
return item if type(item) == AuditSeverity else AuditSeverity[item]
|
|
|
|
|
|
|
|
|
|
|
|
class AuditLogEntry(db.Model):
|
|
|
|
id = db.Column(db.Integer, primary_key=True)
|
|
|
|
|
|
|
|
created_at = db.Column(db.DateTime, nullable=False, default=datetime.datetime.utcnow)
|
|
|
|
|
|
|
|
causer_id = db.Column(db.Integer, db.ForeignKey("user.id"), nullable=True)
|
2020-12-10 17:49:37 +01:00
|
|
|
causer = db.relationship("User", foreign_keys=[causer_id], back_populates="audit_log_entries")
|
2020-12-10 12:37:15 +01:00
|
|
|
|
|
|
|
severity = db.Column(db.Enum(AuditSeverity), nullable=False)
|
|
|
|
|
|
|
|
title = db.Column(db.String(100), nullable=False)
|
|
|
|
url = db.Column(db.String(200), nullable=True)
|
|
|
|
|
|
|
|
package_id = db.Column(db.Integer, db.ForeignKey("package.id"), nullable=True)
|
2020-12-10 17:49:37 +01:00
|
|
|
package = db.relationship("Package", foreign_keys=[package_id], back_populates="audit_log_entries")
|
2020-12-10 12:37:15 +01:00
|
|
|
|
|
|
|
description = db.Column(db.Text, nullable=True, default=None)
|
|
|
|
|
|
|
|
def __init__(self, causer, severity, title, url, package=None, description=None):
|
|
|
|
if len(title) > 100:
|
|
|
|
title = title[:99] + "…"
|
|
|
|
|
|
|
|
self.causer = causer
|
|
|
|
self.severity = severity
|
|
|
|
self.title = title
|
|
|
|
self.url = url
|
|
|
|
self.package = package
|
|
|
|
self.description = description
|
|
|
|
|
|
|
|
|
|
|
|
REPO_BLACKLIST = [".zip", "mediafire.com", "dropbox.com", "weebly.com",
|
|
|
|
"minetest.net", "dropboxusercontent.com", "4shared.com",
|
|
|
|
"digitalaudioconcepts.com", "hg.intevation.org", "www.wtfpl.net",
|
|
|
|
"imageshack.com", "imgur.com"]
|
|
|
|
|
2020-12-10 17:49:37 +01:00
|
|
|
|
2020-12-10 12:37:15 +01:00
|
|
|
class ForumTopic(db.Model):
|
|
|
|
topic_id = db.Column(db.Integer, primary_key=True, autoincrement=False)
|
2020-12-10 17:49:37 +01:00
|
|
|
|
2020-12-10 12:37:15 +01:00
|
|
|
author_id = db.Column(db.Integer, db.ForeignKey("user.id"), nullable=False)
|
|
|
|
author = db.relationship("User")
|
|
|
|
|
|
|
|
wip = db.Column(db.Boolean, server_default="0")
|
|
|
|
discarded = db.Column(db.Boolean, server_default="0")
|
|
|
|
|
|
|
|
type = db.Column(db.Enum(PackageType), nullable=False)
|
|
|
|
title = db.Column(db.String(200), nullable=False)
|
|
|
|
name = db.Column(db.String(30), nullable=True)
|
|
|
|
link = db.Column(db.String(200), nullable=True)
|
|
|
|
|
|
|
|
posts = db.Column(db.Integer, nullable=False)
|
|
|
|
views = db.Column(db.Integer, nullable=False)
|
|
|
|
|
|
|
|
created_at = db.Column(db.DateTime, nullable=False, default=datetime.datetime.utcnow)
|
|
|
|
|
|
|
|
def getRepoURL(self):
|
|
|
|
if self.link is None:
|
|
|
|
return None
|
|
|
|
|
|
|
|
for item in REPO_BLACKLIST:
|
|
|
|
if item in self.link:
|
|
|
|
return None
|
|
|
|
|
|
|
|
return self.link.replace("repo.or.cz/w/", "repo.or.cz/")
|
|
|
|
|
|
|
|
def getAsDictionary(self):
|
|
|
|
return {
|
|
|
|
"author": self.author.username,
|
|
|
|
"name": self.name,
|
|
|
|
"type": self.type.toName(),
|
|
|
|
"title": self.title,
|
|
|
|
"id": self.topic_id,
|
|
|
|
"link": self.link,
|
|
|
|
"posts": self.posts,
|
|
|
|
"views": self.views,
|
|
|
|
"is_wip": self.wip,
|
|
|
|
"discarded": self.discarded,
|
|
|
|
"created_at": self.created_at.isoformat(),
|
|
|
|
}
|
|
|
|
|
|
|
|
def checkPerm(self, user, perm):
|
|
|
|
if not user.is_authenticated:
|
|
|
|
return False
|
|
|
|
|
|
|
|
if type(perm) == str:
|
|
|
|
perm = Permission[perm]
|
|
|
|
elif type(perm) != Permission:
|
|
|
|
raise Exception("Unknown permission given to ForumTopic.checkPerm()")
|
|
|
|
|
|
|
|
if perm == Permission.TOPIC_DISCARD:
|
|
|
|
return self.author == user or user.rank.atLeast(UserRank.EDITOR)
|
|
|
|
|
|
|
|
else:
|
|
|
|
raise Exception("Permission {} is not related to topics".format(perm.name))
|
|
|
|
|
|
|
|
|
|
|
|
if app.config.get("LOG_SQL"):
|
|
|
|
import logging
|
|
|
|
logging.basicConfig()
|
|
|
|
logging.getLogger('sqlalchemy.engine').setLevel(logging.INFO)
|