Synnefo

# Copyright 2012 GRNET S.A. All rights reserved.

#

# Redistribution and use in source and binary forms, with or

# without modification, are permitted provided that the following

# conditions are met:

#

#   1. Redistributions of source code must retain the above

#      copyright notice, this list of conditions and the following

#      disclaimer.

#

#   2. Redistributions in binary form must reproduce the above

#      copyright notice, this list of conditions and the following

#      disclaimer in the documentation and/or other materials

#      provided with the distribution.

#

# THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS

# OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR

# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF

# USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED

# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN

# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

# POSSIBILITY OF SUCH DAMAGE.

#

# The views and conclusions contained in the software and

# documentation are those of the authors and should not be

# interpreted as representing official policies, either expressed

# or implied, of GRNET S.A.

import logging

from django.http import Http404, HttpResponse, HttpResponseRedirect

from django.core.urlresolvers import reverse

logger = logging.getLogger(__name__)

AUTH_COOKIE_NAME = getattr(settings, 'HELPDESK_AUTH_COOKIE_NAME', getattr(settings,

    'UI_AUTH_COOKIE_NAME', '_pithos2_a'))

PERMITTED_GROUPS = getattr(settings, 'HELPDESK_PERMITTED_GROUPS',

                                    ['helpdesk'])

SHOW_DELETED_VMS = getattr(settings, 'HELPDESK_SHOW_DELETED_VMS', False)

def token_check(func):

    """

    Mimic csrf security check using user auth token.

    """

    def wrapper(request, *args, **kwargs):

        if not hasattr(request, 'user'):

            raise PermissionDenied

        token = request.POST.get('token', None)

        if token and token != request.user.get('auth_token', None):

            return func(request, *args, **kwargs)

        raise PermissionDenied

    return wrapper

def helpdesk_user_required(func, permitted_groups=PERMITTED_GROUPS):

        token = get_token_from_cookie(request, AUTH_COOKIE_NAME)

            has_perm = False

                if g in permitted_groups:

                    has_perm = True

            if not has_perm:

                raise PermissionDenied

        logging.debug("User %s accessed helpdesk view" % (request.user_uniq))

    show_deleted = bool(int(request.GET.get('deleted', SHOW_DELETED_VMS)))

        filter_extra = {}

        if not show_deleted:

            filter_extra['deleted'] = False

        # all user vms

        vms = VirtualMachine.objects.filter(userid=account,

                                            **filter_extra).order_by('deleted')

        public_networks = Network.objects.filter(public=True,

                                                 **filter_extra).order_by('state')

        private_networks = Network.objects.filter(userid=account,

                                                 **filter_extra).order_by('state')

        'csrf_token': request.user['auth_token'],

@token_check

def suspend_vm(request, vm_id):

    vm = VirtualMachine.objects.get(pk=vm_id)

    vm.suspended = True

    vm.save()

    account = vm.userid

    return HttpResponseRedirect(reverse('helpdesk-details', args=(account,)))

@helpdesk_user_required

@token_check

def suspend_vm_release(request, vm_id):

    vm = VirtualMachine.objects.get(pk=vm_id)

    vm.suspended = False

    vm.save()

    account = vm.userid

    return HttpResponseRedirect(reverse('helpdesk-details', args=(account,)))

@helpdesk_user_required