# ContentDB # Copyright (C) 2018 rubenwardy # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . from flask import * from flask_login import current_user, login_required from flask_wtf import FlaskForm from sqlalchemy import func from wtforms import * from wtforms.validators import * from app.markdown import render_markdown from app.models import * from app.tasks.emails import sendEmailRaw from app.tasks.forumtasks import checkForumAccount from app.utils import rank_required, addAuditLog from . import bp @bp.route("/users/", methods=["GET"]) def list_all(): users = db.session.query(User, func.count(Package.id)) \ .select_from(User).outerjoin(Package) \ .order_by(db.desc(User.rank), db.asc(User.display_name)) \ .group_by(User.id).all() return render_template("users/list.html", users=users) @bp.route("/users//") def profile(username): user = User.query.filter_by(username=username).first() if not user: abort(404) packages = user.packages.filter(Package.state != PackageState.DELETED) if not current_user.is_authenticated or (user != current_user and not current_user.canAccessTodoList()): packages = packages.filter_by(state=PackageState.APPROVED) packages = packages.order_by(db.asc(Package.title)) topics_to_add = None if current_user == user or user.checkPerm(current_user, Permission.CHANGE_AUTHOR): topics_to_add = ForumTopic.query \ .filter_by(author_id=user.id) \ .filter(~ db.exists().where(Package.forums == ForumTopic.topic_id)) \ .order_by(db.asc(ForumTopic.name), db.asc(ForumTopic.title)) \ .all() # Process GET or invalid POST return render_template("users/profile.html", user=user, packages=packages, topics_to_add=topics_to_add) @bp.route("/users//check/", methods=["POST"]) @login_required def user_check(username): user = User.query.filter_by(username=username).first() if user is None: abort(404) if current_user != user and not current_user.rank.atLeast(UserRank.MODERATOR): abort(403) if user.forums_username is None: abort(404) task = checkForumAccount.delay(user.forums_username) next_url = url_for("users.profile", username=username) return redirect(url_for("tasks.check", id=task.id, r=next_url)) class SendEmailForm(FlaskForm): subject = StringField("Subject", [InputRequired(), Length(1, 300)]) text = TextAreaField("Message", [InputRequired()]) submit = SubmitField("Send") @bp.route("/users//send-email/", methods=["GET", "POST"]) @rank_required(UserRank.MODERATOR) def send_email(username): user = User.query.filter_by(username=username).first() if user is None: abort(404) next_url = url_for("users.profile", username=user.username) if user.email is None: flash("User has no email address!", "danger") return redirect(next_url) form = SendEmailForm(request.form) if form.validate_on_submit(): addAuditLog(AuditSeverity.MODERATION, current_user, "Sent email to {}".format(user.display_name), url_for("users.profile", username=username)) text = form.text.data html = render_markdown(text) task = sendEmailRaw.delay([user.email], form.subject.data, text, html) return redirect(url_for("tasks.check", id=task.id, r=next_url)) return render_template("users/send_email.html", form=form)