U scf@sddlmZddlmZddlmZddlmZddlm Z ddl m Z ddl m Z ddl mZmZdd lmZdd lmZmZmZdd lmZmZmZdd lmZdd lmZddlmZddl m!Z!ddl"m#Z$m%Z&m'Z(ddl)m*Z*ddl+m,Z,m-Z-ddl.m/Z/e eZ0e eZ1e e/Z2e e1dddde e0e&j3ddGddde Z4e e1dddde e0e&j5dde e2e$j6ge*ddddGddde Z7e e1dddde e0e&j8ddGddde Z9e e1dddde e0e&j:ddGd d!d!e Z;e e1dddde e0e&j<ddGd"d#d#e Z=e e1dddde e0e&j>ddGd$d%d%e Z?e e1dddde e0e&j@ddGd&d'd'e ZAe e1dddde e0e&jBdde e2e$j6ge*ddddGd(d)d)e ZCe e1dddde e0e&jDddGd*d+d+e ZEe e1dddde e0e&jFddGd,d-d-e ZGe e1dddde e0e&jHddGd.d/d/e ZId0S)1) timedelta)Q)timezonestatus)APIView)#decorator_from_middleware_with_args)method_decorator)google_recaptcha_helperGoogleRecaptchaException)AuthorizatorMiddleware)"AccessSerializerForAllCollabratorsInvitationSerializerAccessibleInstituteSerializer))invite_collaborator_email_content_buildersend_html_emailsend_sms_invite)SerializerValidationMiddleware) MyResponse)check_institute_limitations)User) defined_roles serializersutils) Institute)Access InviteAccess)CollaborationAccessMiddlewareT)accept_user_tokenpost)namec@seZdZdZddZdS)Invitez This API class is responsible for handling incoming requests for inviting another user to a institute. We check access in the views level and not in middleware level, because it was based on input parameters of views. c Cs|jd}|jd}|r$|}|jd}|rRd}d}t||}||}|jd}|jd} |j} ztj j|dd } Wn"t |d d d t j d YSXzt j j|j| d} | j} Wn"t |d d d t j d YSXtj j| ddd}t j j| d}||| jkr@t |d d| jdd t j d St| |sdt |d d d t j d Stj jtddtddB|jttddd}|dkrt |d d d t j d Stj j|jttddd}|dkr$z t| Wn.tk r"}z|jWYSd}~XYnXd}|rPztj j|d}Wn YnXn&|rvztj j|d}Wn YnXtj j| ||ddd}t|dkrt |d d d t j d S|rt j j| |d!}t|dkrt |d d"d t j d Stj j| |||j||d#}d$}| jr,| j r,| jd%| j }n| jr<| j}n| j rJ| j }|rlt!|| j"|d&}t#||n|rt$||| j"d't%&|j'}t |d(d)|d*t j(d S)+N institute_idemailphoneu(۱۲۳۴۵۶۷۸۹۰١٢٣٤٥٦٧٨٩٠Z12345678901234567890roleszg-recaptcha-responseF)idsandboxerror Forbiddenrmessageruser institute)r.rejectedcanceledr.z8The capacity to send invitations to each institution is z peopleT)r/)r0H)hours)modifirecreated_at__gt )r#)r$)r. invited_email invited_phoner/r0rzThis user is already invited)r.r-z#This user is already a collaborator)r.r: invited_userr4r9r%- )institute_namecaller_full_name)to caller_namer>ok Successful)rr+access))middleware_serializer_datagetlowerstr maketrans translatePOSTmiddleware_userrobjectsrrHTTP_403_FORBIDDENrr%rfiltercount$best_max_collaborators_per_institutecollaborators_utils,check_modify_collaborators_base_on_roles_catrrnowrr r my_responserlencreate first_name last_namerr rrcollaborators_serializersrdata HTTP_200_OK)selfrequestr"r#r$ZintabZouttabZtranslation_tabletarget_user_rolesg_recaptcha_responsecallerr.Z siu_accessZ siu_rolesZother_invitation_countZother_access_countZfailed_invitation_attemptsattemptser;Z9other_active_invitation_for_target_user_on_this_instituteZ.other_access_for_target_user_on_this_institute invitation full_namecontentZinvite_access_record_datarg//var/www/wikiazma_server/collaborators/views.pyr)s                   z Invite.postN__name__ __module__ __qualname____doc__rrgrgrgrhr!sr!r&r"c@seZdZddZdS)ListInvitationsc Csz|jd}|jd}|j}tjj|ddd}|}|d|||}t|ddj }t |dd ||d d t j d S) NskiptakeF)r.r0r/ created_atTmanyrBrCZ invitations total_countrr+r[r) rErFmiddleware_model_recordrrMrOrPorder_byrr[rrr\) r]r^rorpr.querysetruinvitations_queryinvitations_datargrgrhrs$  zListInvitations.postNrjrkrlrrgrgrgrhrnsrnc@seZdZddZdS)ListMyInvitationsc Csz|jd}|jd}|j}tjj|ddd}|}|d|||}t|ddj }t |dd ||d d t j d S) NrorpF)r;r0r/rqTrrrBrCrtrvr) rErFrLrrMrOrPrxrr[rrr\) r]r^rorpraryrurzr{rgrgrhrs"  zListMyInvitations.postNr|rgrgrgrhr}sr}c@seZdZdZddZdS)AcceptInvitationq This API class is responsible for handling incoming requests for accepting an invitaion to a institute. cCs|jd}ztjj|j|ddd}Wn"t|dddtjdYSXtjj |j|j d}t |d krt|dd dtjdStjj |j |j |j|j j|j jd }|t|d d dtjdS)N invitation_idF)r;r&r0r/r(0We cant find your invitation for this institute!r*rr,rz%You are a member of this institution!)r-r.r%r>institute_created_atrBrC)rErFrrMrLrrrNrrOr.rVrWr;r%r rqdeleter\)r]r^rrdZ access_queryrDrgrgrhrs:      zAcceptInvitation.postNrirgrgrgrhr~sr~c@seZdZdZddZdS)RejectInvitationrcCsn|jd}ztjj|j|ddd}Wn"t|dddtjdYSXd|_| t|d d dtj dS) NrF)r;r&r/r0r(rr*rTrBrC) rErFrrMrLrrrNr/saver\)r]r^rrdrgrgrhrs    zRejectInvitation.postNrirgrgrgrhrsrc@seZdZddZdS)RemoveInvitationcCs|jd}|j}ztjj|ddd}|j}Wn"t|dddtjdYSXzt jj||j d}|j}Wn"t|d d dtj dYSXt ||st|d d dtj dSd |_||_|t|d d dtjdS)NrFr&r0r/ not_foundinvitation not foundr*rr,r(r)TrBrC)rErFrLrrMr%rrHTTP_404_NOT_FOUNDrr.rNrRrSr0r4rr\)r]r^rrardr_ caller_access caller_rolesrgrgrhrs2    zRemoveInvitation.postNr|rgrgrgrhrsrc@seZdZdZddZdS) RemoveAccesszt This API class is responsible for handling incoming requests for removing access of a user to a institute. cCs|jd}ztjj|d}|j}Wn"t|dddtjdYSXztjj|j|j d}|j}Wn"t|dd dtj dYSXt ||st|dd dtj dS| t|d d dtjdS) N access_idr&rAccess not foundr*rr,r(r)rBrC)rErFrrMr%rrrrLr.rNrRrSrr\)r]r^rrDr_rrrgrgrhrBs$    zRemoveAccess.postNrirgrgrgrhr:src@seZdZdZddZdS)AllCollaboratorszt This API class is responsible for handling incoming requests for getting all collaborators of a institute. c Cs|jd}|jd}|jd}tjj|jd}|rf|t|dt|dBt|dBt|dB}|}||||}t|d d j }t |d d ||d dt j dS)Nrorp search_wordsr1)Zuser__email__icontains)Zuser__phone__icontains)Zuser__first_name__icontains)Zuser__last_name__icontainsTrrrBrC) collaboratorsrurvr) rErFrrMrOrwrrPr r[rrr\) r]r^rorprZ access_listruZskipped_take_listZaccess_list_datargrgrhrfs.   zAllCollaborators.postNrirgrgrgrhr]src@seZdZddZdS)LeaveCollaboratorcCs|jd}ztjj|j|d}Wn"t|dddtjdYSXtj |j krht|dddtj dS| t|dd dtj dS) Nr")r- institute__idr(r)r*rzfYou can not leave your institute, you can delete this institute or transfer ownership to another user.rBrC)rErFrrMrLrrrNdr__ROLE_OWNER__r%HTTP_401_UNAUTHORIZEDrr\)r]r^r"rDrgrgrhrs    zLeaveCollaborator.postNr|rgrgrgrhrsrc@seZdZddZdS)EditInvitationcCs |jd}|jd}ztjj|ddd}|j}Wn"t|dddtjdYSXztjj|j |j d }|j}Wn"t|d d dtj dYSXt ||st|d d dtj dSt ||st|d d dtj dS||_|j |_|t|d d dtjdS)Nr new_rolesFrrrr*rr,r(r)rBrC)rErFrrMr%rrrrrLr.rNrRrSr4rr\)r]r^rrrdr_rrrgrgrhrs6      zEditInvitation.postNr|rgrgrgrhrsrc@seZdZddZdS)EditCollaboratorcCs|jd}|jd}ztjj|d}|j}Wn"t|dddtjdYSXztjj|j|j d}|j}Wn"t|d d dtj dYSXt ||st|d d dtj dSt ||st|d d dtj dS||_| t|d d dtjdS) Nrrrrrr*rr,r(r)rBrC)rErFrrMr%rrrrLr.rNrRrSrr\)r]r^rrZ access_recordr_rrrgrgrhrs,      zEditCollaborator.postNr|rgrgrgrhrsrN)Jdatetimerdjango.db.modelsr django.utilsrrest_frameworkrrest_framework.viewsrdjango.utils.decoratorsrr authenticate.attemp_recaptchar r authenticate.middlewarer Zcollaborators.serializersr rrZ utils.pushersrrrwikiazma.middlewarerutils.myresponserZutils.limitationsrauthenticate.modelsrrrrrrZrrRinstitute.modelsrZcollaborators.modelsrrZcollaborators.middlewarer serializer_validation_middlewareIuser_token_or_server_token_or_server_API_key_validation_and_authorizationZ"check_access_permission_middlewareZInviteInputSerializerr!ZListInvitationInputSerializer!__PERMISSION_READ_COLLABORATORS__rnZListMyInvitationInputSerializerr}ZAcceptInvitationInputSerializerr~ZRejectInvitationInputSerializerrZRemoveInvitationInputSerializerrZRemoveAccessInputSerializerrZAllCollaboratorsInputSerializerrZ LeaveCollaboratorInputSerializerrZEditInvitationInputSerializerrZEditCollaboratorInputSerializerrrgrgrgrhs               }   *      "