# -*- mode: python -*- # -*- coding: utf-8 -*- ############################################################################## # # Gestion scolarite IUT # # Copyright (c) 1999 - 2021 Emmanuel Viennet. All rights reserved. # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # # Emmanuel Viennet emmanuel.viennet@viennet.net # ############################################################################## """Fonctions sur les utilisateurs """ # Anciennement ZScoUsers.py, fonctions de gestion des données réécrite avec flask/SQLAlchemy import string import re import time import md5 import base64 import jaxml from flask import current_app, url_for, g from flask_login import current_user import cracklib # pylint: disable=import-error from app.auth.models import Permission from app.auth.models import User from app.scodoc import html_sco_header from app.scodoc import sco_cache from app.scodoc import sco_etud from app.scodoc import sco_excel from app.scodoc import sco_import_users from app.scodoc import sco_preferences from app.scodoc.gen_tables import GenTable from app.scodoc.notes_log import log from app.scodoc.sco_permissions_check import can_handle_passwd from app.scodoc.scolog import logdb from app.scodoc.sco_etud import format_prenom, format_nom from app.scodoc.TrivialFormulator import TrivialFormulator, tf_error_message import app.scodoc.notesdb as ndb import app.scodoc.sco_utils as scu from app.scodoc.sco_exceptions import ( AccessDenied, ScoException, ScoValueError, ScoInvalidDateError, ScoLockedFormError, ScoGenError, ) def is_valid_password(cleartxt): """Check password. returns True if OK. """ if ( hasattr(scu.CONFIG, "MIN_PASSWORD_LENGTH") and scu.CONFIG.MIN_PASSWORD_LENGTH > 0 and len(cleartxt) < scu.CONFIG.MIN_PASSWORD_LENGTH ): return False # invalid: too short try: _ = cracklib.FascistCheck(cleartxt) return True except ValueError: return False # --------------- # --------------- # XXX TODO supprimer ndb.GetUsersDBConnexion def index_html(context, REQUEST, all_depts=False, with_olds=False, format="html"): "gestion utilisateurs..." all_depts = int(all_depts) with_olds = int(with_olds) H = [html_sco_header.html_sem_header(context, REQUEST, "Gestion des utilisateurs")] H.append("

Gestion des utilisateurs

") if current_user.has_permission(Permission.ScoUsersAdmin, g.scodoc_dept): H.append( '

Ajouter un utilisateur'.format( url_for("users.create_user_form", scodoc_dept=g.scodoc_dept).encode( scu.SCO_ENCODING ) # sco8 ) ) H.append( '   Importer des utilisateurs

'.format( url_for("users.import_users_form", scodoc_dept=g.scodoc_dept).encode( scu.SCO_ENCODING ) # sco8 ) ) if all_depts: checked = "checked" else: checked = "" if with_olds: olds_checked = "checked" else: olds_checked = "" H.append( """

Tous les départements Avec anciens utilisateurs

""" % (REQUEST.URL0, checked, olds_checked) ) L = list_users( context, g.scodoc_dept, all_depts=all_depts, with_olds=with_olds, format=format, REQUEST=REQUEST, with_links=current_user.has_permission(Permission.ScoUsersAdmin, g.scodoc_dept), ) if format != "html": return L H.append(L) F = html_sco_header.sco_footer(context, REQUEST) return "\n".join(H) + F def list_users( context, dept, all_depts=False, # tous les departements with_olds=False, # inclut les anciens utilisateurs (status "old") format="html", with_links=True, REQUEST=None, ): "List users, returns a table in the specified format" if dept and not all_depts: users = get_user_list(dept=dept, with_olds=with_olds) comm = "dept. %s" % dept.encode(scu.SCO_ENCODING) # sco8 else: r = get_user_list(with_olds=with_olds) comm = "tous" if with_olds: comm += ", avec anciens" comm = "(" + comm + ")" # -- Add some information and links: r = [] for u in users: # Can current user modify this user ? can_modify = can_handle_passwd(u, allow_admindepts=True) d = u.to_dict() r.append(d) # Add links if with_links and can_modify: target = url_for( "users.userinfo", scodoc_dept=g.scodoc_dept, user_name=u.user_name ).encode( scu.SCO_ENCODING ) # sco8 d["_user_name_target"] = target d["_nom_target"] = target d["_prenom_target"] = target # Hide passwd modification date (depending on visitor's permission) if not can_modify: d["date_modif_passwd"] = "(non visible)" title = "Utilisateurs définis dans ScoDoc" tab = GenTable( rows=r, columns_ids=( "user_name", "nom_fmt", "prenom_fmt", "email", "dept", "roles_string", "date_expiration", "date_modif_passwd", "passwd_temp", "status_txt", ), titles={ "user_name": "Login", "nom_fmt": "Nom", "prenom_fmt": "Prénom", "email": "Mail", "dept": "Dept.", "roles": "Rôles", "date_expiration": "Expiration", "date_modif_passwd": "Modif. mot de passe", "passwd_temp": "Temp.", "status_txt": "Etat", }, caption=title, page_title="title", html_title="""

%d utilisateurs %s

Cliquer sur un nom pour changer son mot de passe

""" % (len(r), comm), html_class="table_leftalign list_users", html_with_td_classes=True, html_sortable=True, base_url="%s?all=%s" % (REQUEST.URL0, all), pdf_link=False, # table is too wide to fit in a paper page => disable pdf preferences=sco_preferences.SemPreferences(context), ) return tab.make_page( context, format=format, with_html_headers=False, REQUEST=REQUEST ) def get_user_list(dept=None, with_olds=False): """Returns list of users. If dept, select users from this dept, else return all users. """ # was get_userlist q = User.query if dept is not None: q = q.filter_by(dept=dept) if not with_olds: q = q.filter_by(is_old=False) return q.all() # def get_user_infos(user_list): # return [ user_info(u) for u in user_list ]