mirror of
https://github.com/haiwen/seahub.git
synced 2025-09-12 13:24:52 +00:00
Add anonymous share feature
This commit is contained in:
xiez
257
share/views.py
257
share/views.py
@@ -1,62 +1,221 @@
|
||||
from django.http import HttpResponse, HttpResponseRedirect
|
||||
from django.shortcuts import render_to_response
|
||||
# encoding: utf-8
|
||||
from django.core.mail import send_mail
|
||||
from django.core.urlresolvers import reverse
|
||||
from django.template import RequestContext
|
||||
from django.contrib.auth.decorators import login_required
|
||||
from django.http import HttpResponse, HttpResponseRedirect, Http404
|
||||
from django.shortcuts import render_to_response
|
||||
from django.template import Context, loader, RequestContext
|
||||
|
||||
from forms import UserShareForm
|
||||
from models import UserShare
|
||||
from auth.decorators import login_required
|
||||
from django.contrib import messages
|
||||
from django.contrib.sites.models import Site, RequestSite
|
||||
from pysearpc import SearpcError
|
||||
from seaserv import seafserv_threaded_rpc, get_repo, ccnet_rpc
|
||||
|
||||
|
||||
@login_required
|
||||
def list_shared_repos(request):
|
||||
"""Show the repos I shared."""
|
||||
|
||||
share_items = UserShare.objects.filter(from_user=request.user)
|
||||
share2me_items = UserShare.objects.filter(to_user=request.user)
|
||||
#for repo in s_repos:
|
||||
# s_repos
|
||||
# pass
|
||||
return render_to_response("repo/shared_repo_list.html",
|
||||
{ 'share_items': share_items,
|
||||
"share2me_items": share2me_items },
|
||||
context_instance=RequestContext(request))
|
||||
from forms import RepoShareForm
|
||||
from models import AnonymousShare
|
||||
#from seahub.contacts.models import Contact
|
||||
from seahub.views import validate_owner, validate_emailuser
|
||||
from seahub.utils import go_permission_error
|
||||
from settings import ANONYMOUS_SHARE_COOKIE_TIMEOUT
|
||||
from tokens import anon_share_token_generator
|
||||
|
||||
@login_required
|
||||
def share_repo(request):
|
||||
"""Share a repo to a user."""
|
||||
|
||||
if request.method == 'POST':
|
||||
form = UserShareForm(request.POST)
|
||||
if form.is_valid():
|
||||
repo_share = UserShare()
|
||||
repo_share.from_user = request.user
|
||||
repo_share.to_user = form.to_user
|
||||
repo_share.repo_id = form.cleaned_data['repo_id']
|
||||
try:
|
||||
repo_share.save()
|
||||
except IntegrityError:
|
||||
# catch the case repo added to group before
|
||||
pass
|
||||
return HttpResponseRedirect(reverse('shared_repo_list', args=[]))
|
||||
else:
|
||||
user_email = request.REQUEST.get('user_email', '')
|
||||
repo_id = request.REQUEST.get('repo_id', '')
|
||||
form = UserShareForm(initial={'user_email': user_email, 'repo_id': repo_id})
|
||||
"""
|
||||
Handle repo share request
|
||||
"""
|
||||
if request.method != 'POST':
|
||||
raise Http404
|
||||
|
||||
return render_to_response("repo/share_repo.html", {
|
||||
'form': form,
|
||||
}, context_instance=RequestContext(request))
|
||||
form = RepoShareForm(request.POST)
|
||||
if not form.is_valid():
|
||||
# TODO: may display error msg on form
|
||||
raise Http404
|
||||
|
||||
email_or_group = form.cleaned_data['email_or_group']
|
||||
repo_id = form.cleaned_data['repo_id']
|
||||
from_email = request.user.username
|
||||
|
||||
# Test whether user is the repo owner
|
||||
if not validate_owner(request, repo_id):
|
||||
return go_permission_error(request, u'只有目录拥有者有权共享目录')
|
||||
|
||||
# Handle the diffent separator
|
||||
to_email_str = email_or_group.replace(';',',')
|
||||
to_email_str = to_email_str.replace('\n',',')
|
||||
to_email_str = to_email_str.replace('\r',',')
|
||||
to_email_list = to_email_str.split(',')
|
||||
|
||||
for to_email in to_email_list:
|
||||
to_email = to_email.strip(' ')
|
||||
if not to_email:
|
||||
continue
|
||||
|
||||
# if to_email is user name, the format is: 'example@mail.com';
|
||||
# if to_email is group, the format is 'group_name <creator@mail.com>'
|
||||
if (to_email.split(' ')[0].find('@') == -1):
|
||||
# share repo to group
|
||||
# TODO: if we know group id, then we can simplly call group_share_repo
|
||||
if len(to_email.split(' ')) < 2:
|
||||
messages.add_message(request, messages.ERROR, to_email)
|
||||
continue
|
||||
|
||||
group_name = to_email.split(' ')[0]
|
||||
group_creator = to_email.split(' ')[1]
|
||||
# get all the groups the user joined
|
||||
groups = ccnet_rpc.get_groups(request.user.username)
|
||||
find = False
|
||||
for group in groups:
|
||||
# for every group that user joined, if group name and
|
||||
# group creator matchs, then has find the group
|
||||
if group.props.group_name == group_name and \
|
||||
group_creator.find(group.props.creator_name) >= 0:
|
||||
from seahub.group.views import group_share_repo
|
||||
group_share_repo(request, repo_id, int(group.props.id),
|
||||
from_email)
|
||||
find = True
|
||||
messages.add_message(request, messages.INFO, group_name)
|
||||
break
|
||||
if not find:
|
||||
messages.add_message(request, messages.ERROR, group_name)
|
||||
else:
|
||||
if validate_emailuser(to_email):
|
||||
# share repo to registered user
|
||||
try:
|
||||
seafserv_threaded_rpc.add_share(repo_id, from_email,
|
||||
to_email, 'rw')
|
||||
messages.add_message(request, messages.INFO, to_email)
|
||||
except SearpcError, e:
|
||||
messages.add_message(request, messages.ERROR, to_email)
|
||||
# else:
|
||||
# # add email to contacts if not in contacts list
|
||||
# # TODO: condition should be removed
|
||||
# if from_email != to_email and Contact.objects.filter(user_email=from_email, contact_email=to_email).count() = 0:
|
||||
# contact = Contact()
|
||||
# contact.user_email = from_email
|
||||
# contact.contact_email = to_email
|
||||
# contact.contact_name = ''
|
||||
# contact.note = ''
|
||||
# contact.save()
|
||||
else:
|
||||
# share repo to anonymous user
|
||||
kwargs = {'repo_id': repo_id,
|
||||
'repo_owner': from_email,
|
||||
'anon_email': to_email
|
||||
}
|
||||
anonymous_share(request, **kwargs)
|
||||
|
||||
return HttpResponseRedirect(reverse('myhome'))
|
||||
|
||||
@login_required
|
||||
def delete_share_item(request, item_id):
|
||||
"""Delete a share item."""
|
||||
def share_admin(request):
|
||||
"""
|
||||
List repos I share to others or groups, and list my anonymous share links
|
||||
"""
|
||||
username = request.user.username
|
||||
|
||||
# repos that are share to user
|
||||
out_repos = seafserv_threaded_rpc.list_share_repos(username, 'from_email', -1, -1)
|
||||
|
||||
# repos that are share to groups
|
||||
group_repos = seafserv_threaded_rpc.get_group_my_share_repos(request.user.username)
|
||||
for group_repo in group_repos:
|
||||
repo_id = group_repo.props.repo_id
|
||||
if not repo_id:
|
||||
continue
|
||||
repo = get_repo(repo_id)
|
||||
if not repo:
|
||||
continue
|
||||
group_id = group_repo.props.group_id
|
||||
group = ccnet_rpc.get_group(int(group_id))
|
||||
if not group:
|
||||
continue
|
||||
repo.props.shared_email = group.props.group_name
|
||||
repo.gid = group_id
|
||||
|
||||
out_repos.append(repo)
|
||||
|
||||
# anonymous share links
|
||||
out_links = AnonymousShare.objects.filter(repo_owner=request.user.username)
|
||||
for link in out_links:
|
||||
repo = get_repo(link.repo_id)
|
||||
link.repo_name = repo.name
|
||||
link.remain_time = anon_share_token_generator.get_remain_time(link.token)
|
||||
|
||||
return render_to_response('repo/share_admin.html', {
|
||||
"out_repos": out_repos,
|
||||
"out_links": out_links,
|
||||
"protocol": request.is_secure() and 'https' or 'http',
|
||||
"domain": RequestSite(request).domain,
|
||||
}, context_instance=RequestContext(request))
|
||||
|
||||
# 2 views for anonymous share:
|
||||
# - anonymous_share records share infomation to db and sends the mail
|
||||
# - anonymous_share_confirm checks the link use clicked and
|
||||
# adds token to client COOKIE, then redirect client to repo page
|
||||
|
||||
def anonymous_share(request, email_template_name='repo/anonymous_share_email.html', **kwargs):
|
||||
repo_id = kwargs['repo_id']
|
||||
repo_owner = kwargs['repo_owner']
|
||||
anon_email = kwargs['anon_email']
|
||||
token = anon_share_token_generator.make_token()
|
||||
|
||||
anon_share = AnonymousShare()
|
||||
anon_share.repo_owner = repo_owner
|
||||
anon_share.repo_id = repo_id
|
||||
anon_share.anonymous_email = anon_email
|
||||
anon_share.token = token
|
||||
|
||||
try:
|
||||
item = UserShare.objects.get(pk=item_id)
|
||||
item.delete()
|
||||
except UserShare.DoesNotExist:
|
||||
pass
|
||||
anon_share.save()
|
||||
except:
|
||||
messages.add_message(request, messages.ERROR, kwargs['anon_email'])
|
||||
else:
|
||||
# send mail
|
||||
use_https = request.is_secure()
|
||||
site_name = domain = RequestSite(request).domain
|
||||
|
||||
t = loader.get_template(email_template_name)
|
||||
c = {
|
||||
'email': repo_owner,
|
||||
'anon_email': anon_email,
|
||||
'domain': domain,
|
||||
'site_name': site_name,
|
||||
'token': token,
|
||||
'protocol': use_https and 'https' or 'http',
|
||||
}
|
||||
|
||||
try:
|
||||
send_mail(u'您在SeaCloud上收到一个同步目录', t.render(Context(c)), None,
|
||||
[anon_email], fail_silently=False)
|
||||
except:
|
||||
AnonymousShare.objects.filter(token=token).delete()
|
||||
messages.add_message(request, messages.ERROR, anon_email)
|
||||
else:
|
||||
messages.add_message(request, messages.INFO, anon_email)
|
||||
|
||||
def anonymous_share_confirm(request, token=None):
|
||||
assert token is not None # checked by URLconf
|
||||
|
||||
# Check whether token in db
|
||||
try:
|
||||
anon_share = AnonymousShare.objects.get(token=token)
|
||||
except AnonymousShare.DoesNotExist:
|
||||
raise Http404
|
||||
|
||||
context_instance = RequestContext(request)
|
||||
context_instance['repo_owner'] = anon_share.repo_owner
|
||||
if anon_share_token_generator.check_token(token):
|
||||
res = HttpResponseRedirect(reverse('repo', args=[anon_share.repo_id]))
|
||||
res.set_cookie("anontoken", token,
|
||||
max_age=ANONYMOUS_SHARE_COOKIE_TIMEOUT)
|
||||
return res
|
||||
else:
|
||||
return render_to_response('repo/anonymous_share_confirm.html',
|
||||
context_instance=context_instance)
|
||||
|
||||
def remove_anonymous_share(request, token):
|
||||
AnonymousShare.objects.filter(token=token).delete()
|
||||
|
||||
return HttpResponseRedirect(reverse('share_admin'))
|
||||
|
||||
return HttpResponseRedirect(request.META['HTTP_REFERER'])
|
||||
Reference in New Issue
Block a user