mirror of
https://github.com/haiwen/seahub.git
synced 2025-07-17 16:52:09 +00:00
219 lines
8.2 KiB
Python
219 lines
8.2 KiB
Python
# Copyright (c) 2012-2019 Seafile Ltd.
|
|
|
|
import logging
|
|
from datetime import timedelta
|
|
|
|
from django.utils import timezone
|
|
from django.utils.translation import ugettext as _
|
|
from rest_framework import status
|
|
from rest_framework.authentication import SessionAuthentication
|
|
from rest_framework.permissions import IsAuthenticated
|
|
from rest_framework.response import Response
|
|
from rest_framework.views import APIView
|
|
|
|
from seaserv import seafile_api
|
|
|
|
from seahub.api2.authentication import TokenAuthentication
|
|
from seahub.api2.permissions import CanInviteGuest
|
|
from seahub.api2.throttling import UserRateThrottle
|
|
from seahub.api2.utils import api_error
|
|
from seahub.base.accounts import User
|
|
from seahub.utils import is_valid_email
|
|
from seahub.invitations.models import Invitation, RepoShareInvitation
|
|
from seahub.invitations.utils import block_accepter
|
|
from seahub.invitations.settings import INVITATIONS_TOKEN_AGE
|
|
from seahub.constants import PERMISSION_READ, PERMISSION_READ_WRITE, GUEST_USER
|
|
from seahub.share.utils import is_repo_admin
|
|
from seahub.utils import is_org_context
|
|
from seahub.base.templatetags.seahub_tags import email2nickname
|
|
|
|
json_content_type = 'application/json; charset=utf-8'
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
class RepoShareInvitationsView(APIView):
|
|
authentication_classes = (TokenAuthentication, SessionAuthentication)
|
|
permission_classes = (IsAuthenticated, CanInviteGuest)
|
|
throttle_classes = (UserRateThrottle,)
|
|
|
|
def get(self, request, repo_id, format=None):
|
|
""" List repo share invitations.
|
|
"""
|
|
# argument check
|
|
path = request.GET.get('path', None)
|
|
if not path:
|
|
return api_error(status.HTTP_400_BAD_REQUEST, 'path invalid.')
|
|
|
|
# recourse check
|
|
repo = seafile_api.get_repo(repo_id)
|
|
if not repo:
|
|
error_msg = 'Library %s not found.' % repo_id
|
|
return api_error(status.HTTP_404_NOT_FOUND, error_msg)
|
|
|
|
if seafile_api.get_dir_id_by_path(repo.id, path) is None:
|
|
return api_error(status.HTTP_404_NOT_FOUND, 'Folder %s not found.' % path)
|
|
|
|
# permission check
|
|
username = request.user.username
|
|
if is_org_context(request):
|
|
repo_owner = seafile_api.get_org_repo_owner(repo_id)
|
|
else:
|
|
repo_owner = seafile_api.get_repo_owner(repo_id)
|
|
|
|
if username != repo_owner and not is_repo_admin(username, repo_id):
|
|
error_msg = 'Permission denied.'
|
|
return api_error(status.HTTP_403_FORBIDDEN, error_msg)
|
|
|
|
# main
|
|
shared_list = list()
|
|
try:
|
|
shared_queryset = RepoShareInvitation.objects.list_by_repo_id_and_path(repo_id, path)
|
|
except Exception as e:
|
|
logger.error(e)
|
|
error_msg = 'Internal Server Error'
|
|
return api_error(status.HTTP_500_INTERNAL_SERVER_ERROR, error_msg)
|
|
|
|
for obj in shared_queryset:
|
|
data = obj.invitation.to_dict()
|
|
data['permission'] = obj.permission
|
|
data['inviter_name'] = email2nickname(obj.invitation.inviter)
|
|
|
|
shared_list.append(data)
|
|
|
|
return Response({'repo_share_invitation_list': shared_list})
|
|
|
|
|
|
class RepoShareInvitationsBatchView(APIView):
|
|
authentication_classes = (TokenAuthentication, SessionAuthentication)
|
|
permission_classes = (IsAuthenticated, CanInviteGuest)
|
|
throttle_classes = (UserRateThrottle,)
|
|
|
|
def post(self, request, repo_id, format=None):
|
|
""" Batch add repo share invitations.
|
|
"""
|
|
# argument check
|
|
path = request.data.get('path', None)
|
|
if not path:
|
|
return api_error(status.HTTP_400_BAD_REQUEST, 'path invalid.')
|
|
|
|
itype = request.data.get('type', '').lower()
|
|
if not itype or itype != GUEST_USER:
|
|
return api_error(status.HTTP_400_BAD_REQUEST, 'type invalid.')
|
|
|
|
accepters = request.data.get('accepters', None)
|
|
if not accepters or not isinstance(accepters, list):
|
|
return api_error(status.HTTP_400_BAD_REQUEST, 'accepters invalid.')
|
|
|
|
permission = request.data.get('permission', PERMISSION_READ)
|
|
if permission not in (PERMISSION_READ, PERMISSION_READ_WRITE):
|
|
return api_error(status.HTTP_400_BAD_REQUEST, 'permission invalid.')
|
|
|
|
# recourse check
|
|
repo = seafile_api.get_repo(repo_id)
|
|
if not repo:
|
|
return api_error(status.HTTP_404_NOT_FOUND, 'Library %s not found.' % repo_id)
|
|
|
|
if seafile_api.get_dir_id_by_path(repo.id, path) is None:
|
|
return api_error(status.HTTP_404_NOT_FOUND, 'Folder %s not found.' % path)
|
|
|
|
# permission check
|
|
username = request.user.username
|
|
if is_org_context(request):
|
|
repo_owner = seafile_api.get_org_repo_owner(repo_id)
|
|
else:
|
|
repo_owner = seafile_api.get_repo_owner(repo_id)
|
|
|
|
if username != repo_owner and not is_repo_admin(username, repo_id):
|
|
error_msg = 'Permission denied.'
|
|
return api_error(status.HTTP_403_FORBIDDEN, error_msg)
|
|
|
|
# main
|
|
result = {}
|
|
result['failed'] = []
|
|
result['success'] = []
|
|
inviter_name = email2nickname(request.user.username)
|
|
|
|
try:
|
|
invitation_queryset = Invitation.objects.order_by('-invite_time').filter(
|
|
inviter=request.user.username, accept_time=None)
|
|
shared_queryset = RepoShareInvitation.objects.list_by_repo_id_and_path(
|
|
repo_id=repo_id, path=path)
|
|
except Exception as e:
|
|
logger.error(e)
|
|
error_msg = 'Internal Server Error'
|
|
return api_error(status.HTTP_500_INTERNAL_SERVER_ERROR, error_msg)
|
|
|
|
for accepter in accepters:
|
|
|
|
if not accepter.strip():
|
|
continue
|
|
|
|
accepter = accepter.lower()
|
|
|
|
if not is_valid_email(accepter):
|
|
result['failed'].append({
|
|
'email': accepter,
|
|
'error_msg': _('Email %s invalid.') % accepter
|
|
})
|
|
continue
|
|
|
|
if block_accepter(accepter):
|
|
result['failed'].append({
|
|
'email': accepter,
|
|
'error_msg': _('The email address is not allowed to be invited as a guest.')
|
|
})
|
|
continue
|
|
|
|
try:
|
|
user = User.objects.get(accepter)
|
|
# user is active return exist
|
|
if user.is_active is True:
|
|
result['failed'].append({
|
|
'email': accepter,
|
|
'error_msg': _('User %s already exists.') % accepter
|
|
})
|
|
continue
|
|
except User.DoesNotExist:
|
|
pass
|
|
|
|
if invitation_queryset.filter(accepter=accepter).exists():
|
|
invitation = invitation_queryset.filter(accepter=accepter)[0]
|
|
invitation.expire_time = timezone.now() + timedelta(hours=int(INVITATIONS_TOKEN_AGE))
|
|
invitation.save()
|
|
else:
|
|
invitation = Invitation.objects.add(
|
|
inviter=request.user.username, accepter=accepter)
|
|
|
|
if shared_queryset.filter(invitation=invitation).exists():
|
|
result['failed'].append({
|
|
'email': accepter,
|
|
'error_msg': _('This item has been shared to %s.') % accepter
|
|
})
|
|
continue
|
|
|
|
try:
|
|
RepoShareInvitation.objects.add(
|
|
invitation=invitation, repo_id=repo_id, path=path, permission=permission)
|
|
except Exception as e:
|
|
logger.error(e)
|
|
result['failed'].append({
|
|
'email': accepter,
|
|
'error_msg': _('Internal Server Error'),
|
|
})
|
|
|
|
data = invitation.to_dict()
|
|
data['permission'] = permission
|
|
data['inviter_name'] = inviter_name
|
|
|
|
result['success'].append(data)
|
|
|
|
send_sucess = invitation.send_to(email=accepter)
|
|
|
|
if not send_sucess:
|
|
result['failed'].append({
|
|
'email': accepter,
|
|
'error_msg': _('Failed to send email, email service is not properly configured, please contact administrator.'),
|
|
})
|
|
|
|
return Response(result)
|