Synnefo

# Copyright 2011-2012 GRNET S.A. All rights reserved.

#

# Redistribution and use in source and binary forms, with or

# without modification, are permitted provided that the following

# conditions are met:

#

#   1. Redistributions of source code must retain the above

#      copyright notice, this list of conditions and the following

#      disclaimer.

#

#   2. Redistributions in binary form must reproduce the above

#      copyright notice, this list of conditions and the following

#      disclaimer in the documentation and/or other materials

#      provided with the distribution.

#

# THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS

# OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR

# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF

# USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED

# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN

# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

# POSSIBILITY OF SUCH DAMAGE.

#

# The views and conclusions contained in the software and

# documentation are those of the authors and should not be

# interpreted as representing official policies, either expressed

# or implied, of GRNET S.A.

import logging

import calendar

import inflect

engine = inflect.engine()

from urllib import quote

from functools import wraps

from datetime import datetime, timedelta

from collections import defaultdict

from django.contrib import messages

from django.contrib.auth.decorators import login_required

from django.contrib.auth.views import password_change

from django.core.urlresolvers import reverse

from django.db import transaction

from django.db.models import Q

from django.db.utils import IntegrityError

from django.forms.fields import URLField

from django.http import (HttpResponse, HttpResponseBadRequest,

                         HttpResponseForbidden, HttpResponseRedirect,

                         HttpResponseBadRequest, Http404)

from django.shortcuts import redirect

from django.template import RequestContext, loader as template_loader

from django.utils.http import urlencode

from django.utils.translation import ugettext as _

from django.views.generic.create_update import (create_object, delete_object,

                                                get_model_and_form_class)

from django.views.generic.list_detail import object_list, object_detail

from django.http import HttpResponseBadRequest

from django.core.xheaders import populate_xheaders

from astakos.im.models import (AstakosUser, ApprovalTerms, AstakosGroup,

                               Resource, EmailChange, GroupKind, Membership,

                               AstakosGroupQuota, RESOURCE_SEPARATOR)

from django.views.decorators.http import require_http_methods

from django.db.models.query import QuerySet

from astakos.im.activation_backends import get_backend, SimpleBackend

from astakos.im.util import get_context, prepare_response, set_cookie, get_query

from astakos.im.forms import (LoginForm, InvitationForm, ProfileForm,

                              FeedbackForm, SignApprovalTermsForm,

                              ExtendedPasswordChangeForm, EmailChangeForm,

                              AstakosGroupCreationForm, AstakosGroupSearchForm,

                              AstakosGroupUpdateForm, AddGroupMembersForm,

                              AstakosGroupSortForm, MembersSortForm,

                              TimelineForm, PickResourceForm,

                              AstakosGroupCreationSummaryForm)

from astakos.im.functions import (send_feedback, SendMailError,

                                  logout as auth_logout,

                                  activate as activate_func,

                                  switch_account_to_shibboleth,

                                  send_group_creation_notification,

                                  SendNotificationError)

from astakos.im.endpoints.qh import timeline_charge

from astakos.im.settings import (COOKIE_NAME, COOKIE_DOMAIN, LOGOUT_NEXT,

                                 LOGGING_LEVEL, PAGINATE_BY, RESOURCES_PRESENTATION_DATA)

from astakos.im.tasks import request_billing

from astakos.im.api.callpoint import AstakosCallpoint

import astakos.im.messages as astakos_messages

logger = logging.getLogger(__name__)

DB_REPLACE_GROUP_SCHEME = """REPLACE(REPLACE("auth_group".name, 'http://', ''),

                                     'https://', '')"""

callpoint = AstakosCallpoint()

def render_response(template, tab=None, status=200, reset_cookie=False,

                    context_instance=None, **kwargs):

    """

    Calls ``django.template.loader.render_to_string`` with an additional ``tab``

    keyword argument and returns an ``django.http.HttpResponse`` with the

    specified ``status``.

    """

    if tab is None:

        tab = template.partition('_')[0].partition('.html')[0]

    kwargs.setdefault('tab', tab)

    html = template_loader.render_to_string(

        template, kwargs, context_instance=context_instance)

    response = HttpResponse(html, status=status)

    if reset_cookie:

        set_cookie(response, context_instance['request'].user)

    return response

def requires_anonymous(func):

    """

    Decorator checkes whether the request.user is not Anonymous and in that case

    redirects to `logout`.

    """

    @wraps(func)

    def wrapper(request, *args):

        if not request.user.is_anonymous():

            next = urlencode({'next': request.build_absolute_uri()})

            logout_uri = reverse(logout) + '?' + next

            return HttpResponseRedirect(logout_uri)

        return func(request, *args)

    return wrapper

def signed_terms_required(func):

    """

    Decorator checkes whether the request.user is Anonymous and in that case

    redirects to `logout`.

    """

    @wraps(func)

    def wrapper(request, *args, **kwargs):

        if request.user.is_authenticated() and not request.user.signed_terms:

            params = urlencode({'next': request.build_absolute_uri(),

                                'show_form': ''})

            terms_uri = reverse('latest_terms') + '?' + params

            return HttpResponseRedirect(terms_uri)

        return func(request, *args, **kwargs)

    return wrapper

@require_http_methods(["GET", "POST"])

@signed_terms_required

def index(request, login_template_name='im/login.html', extra_context=None):

    """

    If there is logged on user renders the profile page otherwise renders login page.

    **Arguments**

    ``login_template_name``

        A custom login template to use. This is optional; if not specified,

        this will default to ``im/login.html``.

    ``profile_template_name``

        A custom profile template to use. This is optional; if not specified,

        this will default to ``im/profile.html``.

    ``extra_context``

        An dictionary of variables to add to the template context.

    **Template:**

    im/profile.html or im/login.html or ``template_name`` keyword argument.

    """

    template_name = login_template_name

    if request.user.is_authenticated():

        return HttpResponseRedirect(reverse('edit_profile'))

    return render_response(template_name,

                           login_form=LoginForm(request=request),

                           context_instance=get_context(request, extra_context))

@require_http_methods(["GET", "POST"])

@login_required

@signed_terms_required

@transaction.commit_manually

def invite(request, template_name='im/invitations.html', extra_context=None):

    """

    Allows a user to invite somebody else.

    In case of GET request renders a form for providing the invitee information.

    In case of POST checks whether the user has not run out of invitations and then

    sends an invitation email to singup to the service.

    The view uses commit_manually decorator in order to ensure the number of the

    user invitations is going to be updated only if the email has been successfully sent.

    If the user isn't logged in, redirects to settings.LOGIN_URL.

    **Arguments**

    ``template_name``

        A custom template to use. This is optional; if not specified,

        this will default to ``im/invitations.html``.

    ``extra_context``

        An dictionary of variables to add to the template context.

    **Template:**

    im/invitations.html or ``template_name`` keyword argument.

    **Settings:**

    The view expectes the following settings are defined:

    * LOGIN_URL: login uri

    * ASTAKOS_DEFAULT_CONTACT_EMAIL: service support email

    """

    status = None

    message = None

    form = InvitationForm()

    inviter = request.user

    if request.method == 'POST':

        form = InvitationForm(request.POST)

        if inviter.invitations > 0:

            if form.is_valid():

                try:

                    email = form.cleaned_data.get('username')

                    realname = form.cleaned_data.get('realname')

                    inviter.invite(email, realname)

                    message = _(astakos_messages.INVITATION_SENT) % locals()

                    messages.success(request, message)

                except SendMailError, e:

                    message = e.message

                    messages.error(request, message)

                    transaction.rollback()

                except BaseException, e:

                    message = _(astakos_messages.GENERIC_ERROR)

                    messages.error(request, message)

                    logger.exception(e)

                    transaction.rollback()

                else:

                    transaction.commit()

        else:

            message = _(astakos_messages.MAX_INVITATION_NUMBER_REACHED)

            messages.error(request, message)

    sent = [{'email': inv.username,

             'realname': inv.realname,

             'is_consumed': inv.is_consumed}

            for inv in request.user.invitations_sent.all()]

    kwargs = {'inviter': inviter,

              'sent': sent}

    context = get_context(request, extra_context, **kwargs)

    return render_response(template_name,

                           invitation_form=form,

                           context_instance=context)

@require_http_methods(["GET", "POST"])

@login_required

@signed_terms_required

def edit_profile(request, template_name='im/profile.html', extra_context=None):

    """

    Allows a user to edit his/her profile.

    In case of GET request renders a form for displaying the user information.

    In case of POST updates the user informantion and redirects to ``next``

    url parameter if exists.

    If the user isn't logged in, redirects to settings.LOGIN_URL.

    **Arguments**

    ``template_name``

        A custom template to use. This is optional; if not specified,

        this will default to ``im/profile.html``.

    ``extra_context``

        An dictionary of variables to add to the template context.

    **Template:**

    im/profile.html or ``template_name`` keyword argument.

    **Settings:**

    The view expectes the following settings are defined:

    * LOGIN_URL: login uri

    """

    extra_context = extra_context or {}

    form = ProfileForm(instance=request.user)

    extra_context['next'] = request.GET.get('next')

    reset_cookie = False

    if request.method == 'POST':

        form = ProfileForm(request.POST, instance=request.user)

        if form.is_valid():

            try:

                prev_token = request.user.auth_token

                user = form.save()

                reset_cookie = user.auth_token != prev_token

                form = ProfileForm(instance=user)

                next = request.POST.get('next')

                if next:

                    return redirect(next)

                msg = _(astakos_messages.PROFILE_UPDATED)

                messages.success(request, msg)

            except ValueError, ve:

                messages.success(request, ve)

    elif request.method == "GET":

        if not request.user.is_verified:

            request.user.is_verified = True

            request.user.save()

    return render_response(template_name,

                           reset_cookie=reset_cookie,

                           profile_form=form,

                           context_instance=get_context(request,

                                                        extra_context))

@transaction.commit_manually

@require_http_methods(["GET", "POST"])

def signup(request, template_name='im/signup.html', on_success='im/signup_complete.html', extra_context=None, backend=None):

    """

    Allows a user to create a local account.

    In case of GET request renders a form for entering the user information.

    In case of POST handles the signup.

    The user activation will be delegated to the backend specified by the ``backend`` keyword argument

    if present, otherwise to the ``astakos.im.activation_backends.InvitationBackend``

    if settings.ASTAKOS_INVITATIONS_ENABLED is True or ``astakos.im.activation_backends.SimpleBackend`` if not

    (see activation_backends);

    Upon successful user creation, if ``next`` url parameter is present the user is redirected there

    otherwise renders the same page with a success message.

    On unsuccessful creation, renders ``template_name`` with an error message.

    **Arguments**

    ``template_name``

        A custom template to render. This is optional;

        if not specified, this will default to ``im/signup.html``.

    ``on_success``

        A custom template to render in case of success. This is optional;

        if not specified, this will default to ``im/signup_complete.html``.

    ``extra_context``

        An dictionary of variables to add to the template context.

    **Template:**

    im/signup.html or ``template_name`` keyword argument.

    im/signup_complete.html or ``on_success`` keyword argument.

    """

    if request.user.is_authenticated():

        return HttpResponseRedirect(reverse('edit_profile'))

    provider = get_query(request).get('provider', 'local')

    try:

        if not backend:

            backend = get_backend(request)

        form = backend.get_signup_form(provider)

    except Exception, e:

        form = SimpleBackend(request).get_signup_form(provider)

        messages.error(request, e)

    if request.method == 'POST':

        if form.is_valid():

            user = form.save(commit=False)

            try:

                result = backend.handle_activation(user)

                status = messages.SUCCESS

                message = result.message

                user.save()

                if 'additional_email' in form.cleaned_data:

                    additional_email = form.cleaned_data['additional_email']

                    if additional_email != user.email:

                        user.additionalmail_set.create(email=additional_email)

                        msg = 'Additional email: %s saved for user %s.' % (

                            additional_email, user.email)

                        logger.log(LOGGING_LEVEL, msg)

                if user and user.is_active:

                    next = request.POST.get('next', '')

                    response = prepare_response(request, user, next=next)

                    transaction.commit()

                    return response

                messages.add_message(request, status, message)

                transaction.commit()

                return render_response(on_success,

                                       context_instance=get_context(request, extra_context))

            except SendMailError, e:

                message = e.message

                messages.error(request, message)

                transaction.rollback()

            except BaseException, e:

                message = _(astakos_messages.GENERIC_ERROR)

                messages.error(request, message)

                logger.exception(e)

                transaction.rollback()

    return render_response(template_name,

                           signup_form=form,

                           provider=provider,

                           context_instance=get_context(request, extra_context))

@require_http_methods(["GET", "POST"])

@login_required

@signed_terms_required

def feedback(request, template_name='im/feedback.html', email_template_name='im/feedback_mail.txt', extra_context=None):

    """

    Allows a user to send feedback.

    In case of GET request renders a form for providing the feedback information.

    In case of POST sends an email to support team.

    If the user isn't logged in, redirects to settings.LOGIN_URL.

    **Arguments**

    ``template_name``

        A custom template to use. This is optional; if not specified,

        this will default to ``im/feedback.html``.

    ``extra_context``

        An dictionary of variables to add to the template context.

    **Template:**

    im/signup.html or ``template_name`` keyword argument.

    **Settings:**

    * LOGIN_URL: login uri

    * ASTAKOS_DEFAULT_CONTACT_EMAIL: List of feedback recipients

    """

    if request.method == 'GET':

        form = FeedbackForm()

    if request.method == 'POST':

        if not request.user:

            return HttpResponse('Unauthorized', status=401)

        form = FeedbackForm(request.POST)

        if form.is_valid():

            msg = form.cleaned_data['feedback_msg']

            data = form.cleaned_data['feedback_data']

            try:

                send_feedback(msg, data, request.user, email_template_name)

            except SendMailError, e:

                messages.error(request, message)

            else:

                message = _(astakos_messages.FEEDBACK_SENT)

                messages.success(request, message)

    return render_response(template_name,

                           feedback_form=form,

                           context_instance=get_context(request, extra_context))

@require_http_methods(["GET", "POST"])

@signed_terms_required

def logout(request, template='registration/logged_out.html', extra_context=None):

    """

    Wraps `django.contrib.auth.logout` and delete the cookie.

    """

    response = HttpResponse()

    if request.user.is_authenticated():

        email = request.user.email

        auth_logout(request)

        response.delete_cookie(COOKIE_NAME, path='/', domain=COOKIE_DOMAIN)

        msg = 'Cookie deleted for %s' % email

        logger.log(LOGGING_LEVEL, msg)

    next = request.GET.get('next')

    if next:

        response['Location'] = next

        response.status_code = 302

        return response

    elif LOGOUT_NEXT:

        response['Location'] = LOGOUT_NEXT

        response.status_code = 301

        return response

    messages.success(request, _(astakos_messages.LOGOUT_SUCCESS))

    context = get_context(request, extra_context)

    response.write(

        template_loader.render_to_string(template, context_instance=context))

    return response

@require_http_methods(["GET", "POST"])

@transaction.commit_manually

def activate(request, greeting_email_template_name='im/welcome_email.txt',

             helpdesk_email_template_name='im/helpdesk_notification.txt'):

    """

    Activates the user identified by the ``auth`` request parameter, sends a welcome email

    and renews the user token.

    The view uses commit_manually decorator in order to ensure the user state will be updated

    only if the email will be send successfully.

    """

    token = request.GET.get('auth')

    next = request.GET.get('next')

    try:

        user = AstakosUser.objects.get(auth_token=token)

    except AstakosUser.DoesNotExist:

        return HttpResponseBadRequest(_(astakos_messages.ACCOUNT_UNKNOWN))

    if user.is_active:

        message = _(astakos_messages.ACCOUNT_ALREADY_ACTIVE)

        messages.error(request, message)

        return index(request)

    try:

        local_user = AstakosUser.objects.get(

            ~Q(id=user.id),

            email=user.email,

            is_active=True

        )

    except AstakosUser.DoesNotExist:

        try:

            activate_func(

                user,

                greeting_email_template_name,

                helpdesk_email_template_name,

                verify_email=True

            )

            response = prepare_response(request, user, next, renew=True)

            transaction.commit()

            return response

        except SendMailError, e:

            message = e.message

            messages.error(request, message)

            transaction.rollback()

            return index(request)

        except BaseException, e:

            message = _(astakos_messages.GENERIC_ERROR)

            messages.error(request, message)

            logger.exception(e)

            transaction.rollback()

            return index(request)

    else:

        try:

            user = switch_account_to_shibboleth(

                user,

                local_user,

                greeting_email_template_name

            )

            response = prepare_response(request, user, next, renew=True)

            transaction.commit()

            return response

        except SendMailError, e:

            message = e.message

            messages.error(request, message)

            transaction.rollback()

            return index(request)

        except BaseException, e:

            message = _(astakos_messages.GENERIC_ERROR)

            messages.error(request, message)

            logger.exception(e)

            transaction.rollback()

            return index(request)

@require_http_methods(["GET", "POST"])

def approval_terms(request, term_id=None, template_name='im/approval_terms.html', extra_context=None):

    term = None

    terms = None

    if not term_id:

        try:

            term = ApprovalTerms.objects.order_by('-id')[0]

        except IndexError:

            pass

    else:

        try:

            term = ApprovalTerms.objects.get(id=term_id)

        except ApprovalTerms.DoesNotExist, e:

            pass

    if not term:

        messages.error(request, _(astakos_messages.NO_APPROVAL_TERMS))

        return HttpResponseRedirect(reverse('index'))

    f = open(term.location, 'r')

    terms = f.read()

    if request.method == 'POST':

        next = request.POST.get('next')

        if not next:

            next = reverse('index')

        form = SignApprovalTermsForm(request.POST, instance=request.user)

        if not form.is_valid():

            return render_response(template_name,

                                   terms=terms,

                                   approval_terms_form=form,

                                   context_instance=get_context(request, extra_context))

        user = form.save()

        return HttpResponseRedirect(next)

    else:

        form = None

        if request.user.is_authenticated() and not request.user.signed_terms:

            form = SignApprovalTermsForm(instance=request.user)

        return render_response(template_name,

                               terms=terms,

                               approval_terms_form=form,

                               context_instance=get_context(request, extra_context))

@require_http_methods(["GET", "POST"])

@signed_terms_required

def change_password(request):

    return password_change(request,

                           post_change_redirect=reverse('edit_profile'),

                           password_change_form=ExtendedPasswordChangeForm)

@require_http_methods(["GET", "POST"])

@signed_terms_required

@login_required

@transaction.commit_manually

def change_email(request, activation_key=None,

                 email_template_name='registration/email_change_email.txt',

                 form_template_name='registration/email_change_form.html',

                 confirm_template_name='registration/email_change_done.html',

                 extra_context=None):

    if activation_key:

        try:

            user = EmailChange.objects.change_email(activation_key)

            if request.user.is_authenticated() and request.user == user:

                msg = _(astakos_messages.EMAIL_CHANGED)

                messages.success(request, msg)

                auth_logout(request)

                response = prepare_response(request, user)

                transaction.commit()

                return response

        except ValueError, e:

            messages.error(request, e)

        return render_response(confirm_template_name,

                               modified_user=user if 'user' in locals(

                               ) else None,

                               context_instance=get_context(request,

                                                            extra_context))

    if not request.user.is_authenticated():

        path = quote(request.get_full_path())

        url = request.build_absolute_uri(reverse('index'))

        return HttpResponseRedirect(url + '?next=' + path)

    form = EmailChangeForm(request.POST or None)

    if request.method == 'POST' and form.is_valid():

        try:

            ec = form.save(email_template_name, request)

        except SendMailError, e:

            msg = e

            messages.error(request, msg)

            transaction.rollback()

        except IntegrityError, e:

            msg = _(astakos_messages.PENDING_EMAIL_CHANGE_REQUEST)

            messages.error(request, msg)

        else:

            msg = _(astakos_messages.EMAIL_CHANGE_REGISTERED)

            messages.success(request, msg)

            transaction.commit()

    return render_response(form_template_name,

                           form=form,

                           context_instance=get_context(request,

                                                        extra_context))

class ResourcePresentation():

    def __init__(self, data):

        self.data = data

    def update_from_result(self, result):

        if result.is_success:

            for r in result.data:

                rname = '%s%s%s' % (r.get('service'), RESOURCE_SEPARATOR, r.get('name'))

                if not rname in self.data['resources']:

                    self.data['resources'][rname] = {}

                self.data['resources'][rname].update(r)

                self.data['resources'][rname]['id'] = rname

                group = r.get('group')

                if not group in self.data['groups']:

                    self.data['groups'][group] = {}

                self.data['groups'][r.get('group')].update({'name': r.get('group')})

    def test(self, quota_dict):

        for k, v in quota_dict.iteritems():

            rname = k

            value = v

            if not rname in self.data['resources']:

                    self.data['resources'][rname] = {}

            self.data['resources'][rname]['value'] = value

    def update_from_result_report(self, result):

        if result.is_success:

            for r in result.data:

                rname = r.get('name')

                if not rname in self.data['resources']:

                    self.data['resources'][rname] = {}

                self.data['resources'][rname].update(r)

                self.data['resources'][rname]['id'] = rname

                group = r.get('group')

                if not group in self.data['groups']:

                    self.data['groups'][group] = {}

                self.data['groups'][r.get('group')].update({'name': r.get('group')})

    def get_group_resources(self, group):

        return dict(filter(lambda t: t[1].get('group') == group, self.data['resources'].iteritems()))

    def get_groups_resources(self):

        for g in self.data['groups']:

            yield g, self.get_group_resources(g)

    def get_quota(self, group_quotas):

        print '!!!!!', group_quotas

        for r, v in group_quotas.iteritems():

            rname = str(r)

            quota = self.data['resources'].get(rname)

            quota['value'] = v

            yield quota

    def get_policies(self, policies_data):

        for policy in policies_data:

            rname = '%s%s%s' % (policy.get('service'), RESOURCE_SEPARATOR, policy.get('resource'))

            policy.update(self.data['resources'].get(rname))

            yield policy

    def __repr__(self):

        return self.data.__repr__()

    def __iter__(self, *args, **kwargs):

        return self.data.__iter__(*args, **kwargs)

    def __getitem__(self, *args, **kwargs):

        return self.data.__getitem__(*args, **kwargs)

    def get(self, *args, **kwargs):