root / flowspec / views.py @ 052c14aa
History | View | Annotate | Download (11.7 kB)
1 |
# Create your views here.
|
---|---|
2 |
import urllib2 |
3 |
import socket |
4 |
import json |
5 |
from django import forms |
6 |
from django.views.decorators.csrf import csrf_exempt |
7 |
from django.core import urlresolvers |
8 |
from django.core import serializers |
9 |
from django.contrib.auth.decorators import login_required |
10 |
from django.http import HttpResponseRedirect, HttpResponseForbidden, HttpResponse |
11 |
from django.shortcuts import get_object_or_404, render_to_response |
12 |
from django.core.context_processors import request |
13 |
from django.template.context import RequestContext |
14 |
from django.template.loader import get_template, render_to_string |
15 |
from django.utils import simplejson |
16 |
from django.core.urlresolvers import reverse |
17 |
from django.contrib import messages |
18 |
from flowspy.accounts.models import * |
19 |
|
20 |
from django.contrib.auth import authenticate, login |
21 |
|
22 |
from django.forms.models import model_to_dict |
23 |
|
24 |
from flowspy.flowspec.forms import * |
25 |
from flowspy.flowspec.models import * |
26 |
|
27 |
from copy import deepcopy |
28 |
from flowspy.utils.decorators import shib_required |
29 |
import datetime |
30 |
|
31 |
from django.views.decorators.cache import never_cache |
32 |
from django.conf import settings |
33 |
from django.core.mail import mail_admins, mail_managers, send_mail |
34 |
|
35 |
|
36 |
def days_offset(): return datetime.date.today() + datetime.timedelta(days = settings.EXPIRATION_DAYS_OFFSET) |
37 |
|
38 |
@login_required
|
39 |
def user_routes(request): |
40 |
user_routes = Route.objects.filter(applier=request.user) |
41 |
return render_to_response('user_routes.html', {'routes': user_routes}, |
42 |
context_instance=RequestContext(request)) |
43 |
|
44 |
def welcome(request): |
45 |
return render_to_response('welcome.html', context_instance=RequestContext(request)) |
46 |
|
47 |
@login_required
|
48 |
@never_cache
|
49 |
def group_routes(request): |
50 |
group_routes = [] |
51 |
peer = request.user.get_profile().peer |
52 |
if peer:
|
53 |
peer_members = UserProfile.objects.filter(peer=peer) |
54 |
users = [prof.user for prof in peer_members] |
55 |
group_routes = Route.objects.filter(applier__in=users) |
56 |
return render_to_response('user_routes.html', {'routes': group_routes}, |
57 |
context_instance=RequestContext(request)) |
58 |
|
59 |
|
60 |
@login_required
|
61 |
@never_cache
|
62 |
def add_route(request): |
63 |
applier = request.user.pk |
64 |
applier_peer_networks = request.user.get_profile().peer.networks.all() |
65 |
if not applier_peer_networks: |
66 |
messages.add_message(request, messages.WARNING, |
67 |
"Insufficient rights on administrative networks. Cannot add rule. Contact your administrator")
|
68 |
return HttpResponseRedirect(reverse("group-routes")) |
69 |
if request.method == "GET": |
70 |
form = RouteForm() |
71 |
return render_to_response('apply.html', {'form': form, 'applier': applier}, |
72 |
context_instance=RequestContext(request)) |
73 |
|
74 |
else:
|
75 |
form = RouteForm(request.POST) |
76 |
if form.is_valid():
|
77 |
route=form.save(commit=False)
|
78 |
route.applier = request.user |
79 |
route.expires = days_offset() |
80 |
route.status = "PENDING"
|
81 |
route.save() |
82 |
form.save_m2m() |
83 |
route.commit_add() |
84 |
mail_body = render_to_string("rule_add_mail.txt",
|
85 |
{"route": route})
|
86 |
mail_admins("Rule %s creation request submitted by %s" %(route.name, route.applier.username),
|
87 |
mail_body, fail_silently=True)
|
88 |
return HttpResponseRedirect(reverse("group-routes")) |
89 |
else:
|
90 |
return render_to_response('apply.html', {'form': form, 'applier':applier}, |
91 |
context_instance=RequestContext(request)) |
92 |
|
93 |
@login_required
|
94 |
@never_cache
|
95 |
def edit_route(request, route_slug): |
96 |
applier = request.user.pk |
97 |
applier_peer = request.user.get_profile().peer |
98 |
route_edit = get_object_or_404(Route, name=route_slug) |
99 |
route_edit_applier_peer = route_edit.applier.get_profile().peer |
100 |
if applier_peer != route_edit_applier_peer:
|
101 |
messages.add_message(request, messages.WARNING, |
102 |
"Insufficient rights to edit rule %s" %(route_slug))
|
103 |
return HttpResponseRedirect(reverse("group-routes")) |
104 |
if route_edit.status == "ADMININACTIVE" : |
105 |
messages.add_message(request, messages.WARNING, |
106 |
"Administrator has disabled editing of rule %s" %(route_slug))
|
107 |
return HttpResponseRedirect(reverse("group-routes")) |
108 |
if route_edit.status == "EXPIRED" : |
109 |
messages.add_message(request, messages.WARNING, |
110 |
"Cannot edit the expired rule %s. Contact helpdesk to enable it" %(route_slug))
|
111 |
return HttpResponseRedirect(reverse("group-routes")) |
112 |
if route_edit.status == "PENDING" : |
113 |
messages.add_message(request, messages.WARNING, |
114 |
"Cannot edit a pending rule: %s." %(route_slug))
|
115 |
return HttpResponseRedirect(reverse("group-routes")) |
116 |
route_original = deepcopy(route_edit) |
117 |
if request.POST:
|
118 |
form = RouteForm(request.POST, instance = route_edit) |
119 |
if form.is_valid():
|
120 |
route=form.save(commit=False)
|
121 |
route.name = route_original.name |
122 |
route.applier = request.user |
123 |
route.expires = route_original.expires |
124 |
route.status = "PENDING"
|
125 |
route.save() |
126 |
form.save_m2m() |
127 |
route.commit_edit() |
128 |
mail_body = render_to_string("rule_edit_mail.txt",
|
129 |
{"route": route})
|
130 |
mail_admins("Rule %s edit request submitted by %s" %(route.name, route.applier.username),
|
131 |
mail_body, fail_silently=True)
|
132 |
return HttpResponseRedirect(reverse("group-routes")) |
133 |
else:
|
134 |
return render_to_response('apply.html', {'form': form, 'edit':True, 'applier': applier}, |
135 |
context_instance=RequestContext(request)) |
136 |
else:
|
137 |
dictionary = model_to_dict(route_edit, fields=[], exclude=[]) |
138 |
#form = RouteForm(instance=route_edit)
|
139 |
form = RouteForm(dictionary) |
140 |
return render_to_response('apply.html', {'form': form, 'edit':True, 'applier': applier}, |
141 |
context_instance=RequestContext(request)) |
142 |
|
143 |
@login_required
|
144 |
@never_cache
|
145 |
def delete_route(request, route_slug): |
146 |
if request.is_ajax():
|
147 |
route = get_object_or_404(Route, name=route_slug) |
148 |
applier_peer = route.applier.get_profile().peer |
149 |
requester_peer = request.user.get_profile().peer |
150 |
if applier_peer == requester_peer:
|
151 |
route.status = "PENDING"
|
152 |
route.commit_delete() |
153 |
mail_body = render_to_string("rule_delete_mail.txt",
|
154 |
{"route": route})
|
155 |
mail_admins("Rule %s removal request submitted by %s" %(route.name, route.applier.username),
|
156 |
mail_body, fail_silently=True)
|
157 |
html = "<html><body>Done</body></html>"
|
158 |
return HttpResponse(html)
|
159 |
else:
|
160 |
return HttpResponseRedirect(reverse("group-routes")) |
161 |
|
162 |
@login_required
|
163 |
@never_cache
|
164 |
def user_profile(request): |
165 |
user = request.user |
166 |
peer = request.user.get_profile().peer |
167 |
|
168 |
return render_to_response('profile.html', {'user': user, 'peer':peer}, |
169 |
context_instance=RequestContext(request)) |
170 |
|
171 |
@never_cache
|
172 |
def user_login(request): |
173 |
try:
|
174 |
error_username = None
|
175 |
error_orgname = None
|
176 |
error_affiliation = None
|
177 |
error = ''
|
178 |
username = request.META['HTTP_EPPN']
|
179 |
if not username: |
180 |
error_username = True
|
181 |
firstname = request.META['HTTP_SHIB_INETORGPERSON_GIVENNAME']
|
182 |
lastname = request.META['HTTP_SHIB_PERSON_SURNAME']
|
183 |
mail = request.META['HTTP_SHIB_INETORGPERSON_MAIL']
|
184 |
organization = request.META['HTTP_SHIB_HOMEORGANIZATION']
|
185 |
affiliation = request.META['HTTP_SHIB_EP_ENTITLEMENT']
|
186 |
if settings.SHIB_AUTH_AFFILIATION in affiliation.split(";"): |
187 |
has_affiliation = True
|
188 |
if not has_affiliation: |
189 |
error_affiliation = True
|
190 |
if not organization: |
191 |
error_orgname = True
|
192 |
if error_username:
|
193 |
error = "Your idP should release the HTTP_EPPN attribute towards this service\n"
|
194 |
if error_orgname:
|
195 |
error = error + "Your idP should release the HTTP_SHIB_HOMEORGANIZATION attribute towards this service\n"
|
196 |
if error_affiliation:
|
197 |
error = error + "Your idP should release an appropriate HTTP_SHIB_EP_ENTITLEMENT attribute towards this service"
|
198 |
if error_username or error_orgname or error_affiliation: |
199 |
return render_to_response('error.html', {'error': error,}, |
200 |
context_instance=RequestContext(request)) |
201 |
user = authenticate(username=username, firstname=firstname, lastname=lastname, mail=mail, organization=organization, affiliation=affiliation) |
202 |
if user is not None: |
203 |
login(request, user) |
204 |
update_user_attributes(user, firstname=firstname, lastname=lastname, mail=mail) |
205 |
return HttpResponseRedirect(reverse("group-routes")) |
206 |
# Redirect to a success page.
|
207 |
# Return a 'disabled account' error message
|
208 |
else:
|
209 |
error = "Something went wrong during user authentication. Contact your administrator"
|
210 |
return render_to_response('error.html', {'error': error,}, |
211 |
context_instance=RequestContext(request)) |
212 |
except Exception as e: |
213 |
error = "Invalid login procedure"
|
214 |
return render_to_response('error.html', {'error': error,}, |
215 |
context_instance=RequestContext(request)) |
216 |
# Return an 'invalid login' error message.
|
217 |
# return HttpResponseRedirect(reverse("user-routes"))
|
218 |
|
219 |
@login_required
|
220 |
@never_cache
|
221 |
def add_rate_limit(request): |
222 |
if request.method == "GET": |
223 |
form = ThenPlainForm() |
224 |
return render_to_response('add_rate_limit.html', {'form': form,}, |
225 |
context_instance=RequestContext(request)) |
226 |
|
227 |
else:
|
228 |
form = ThenPlainForm(request.POST) |
229 |
if form.is_valid():
|
230 |
then=form.save(commit=False)
|
231 |
then.action_value = "%sk"%then.action_value
|
232 |
then.save() |
233 |
response_data = {} |
234 |
response_data['pk'] = "%s" %then.pk |
235 |
response_data['value'] = "%s:%s" %(then.action, then.action_value) |
236 |
return HttpResponse(simplejson.dumps(response_data), mimetype='application/json') |
237 |
else:
|
238 |
return render_to_response('add_rate_limit.html', {'form': form,}, |
239 |
context_instance=RequestContext(request)) |
240 |
|
241 |
def update_user_attributes(user, firstname, lastname, mail): |
242 |
user.first_name = firstname |
243 |
user.last_name = lastname |
244 |
user.email = mail |
245 |
user.save() |
246 |
|
247 |
@login_required
|
248 |
@never_cache
|
249 |
def add_port(request): |
250 |
if request.method == "GET": |
251 |
form = PortPlainForm() |
252 |
return render_to_response('add_port.html', {'form': form,}, |
253 |
context_instance=RequestContext(request)) |
254 |
|
255 |
else:
|
256 |
form = PortPlainForm(request.POST) |
257 |
if form.is_valid():
|
258 |
port=form.save() |
259 |
response_data = {} |
260 |
response_data['value'] = "%s" %port.pk |
261 |
response_data['text'] = "%s" %port.port |
262 |
return HttpResponse(simplejson.dumps(response_data), mimetype='application/json') |
263 |
else:
|
264 |
return render_to_response('add_port.html', {'form': form,}, |
265 |
context_instance=RequestContext(request)) |
266 |
|
267 |
@login_required
|
268 |
@never_cache
|
269 |
def user_logout(request): |
270 |
return HttpResponseRedirect(settings.SHIB_LOGOUT_URL)
|
271 |
|
272 |
@never_cache
|
273 |
def load_jscript(request, file): |
274 |
return render_to_response('%s.js' % file, context_instance=RequestContext(request), mimetype="text/javascript") |