forked from 0x2620/pandora
451 lines
15 KiB
Python
451 lines
15 KiB
Python
# -*- coding: utf-8 -*-
|
|
from __future__ import division, print_function, absolute_import
|
|
|
|
import os
|
|
import re
|
|
|
|
import ox
|
|
from ox.utils import json
|
|
from oxdjango.api import actions
|
|
from oxdjango.decorators import login_required_json
|
|
from oxdjango.http import HttpFileResponse
|
|
from oxdjango.shortcuts import render_to_json_response, get_object_or_404_json, json_response
|
|
from django import forms
|
|
from django.db.models import Sum, Max
|
|
from django.conf import settings
|
|
from django.shortcuts import render
|
|
|
|
from item import utils
|
|
from archive.chunk import process_chunk
|
|
from . import models
|
|
from changelog.models import add_changelog
|
|
|
|
def get_text_or_404_json(id):
|
|
id = id.split(':')
|
|
username = id[0]
|
|
name = ":".join(id[1:])
|
|
return get_object_or_404_json(models.Text, user__username=username, name=name)
|
|
|
|
@login_required_json
|
|
def addText(request, data):
|
|
'''
|
|
Adds a new text
|
|
takes {
|
|
name: string // text name
|
|
}
|
|
returns {
|
|
id: string, // text id
|
|
name: string // text name
|
|
... more key/value pairs
|
|
}
|
|
see: editText, findTexts, getText, removeText, sortTexts
|
|
'''
|
|
data['name'] = re.sub(' \[\d+\]$', '', data.get('name', 'Untitled')).strip()
|
|
name = data['name']
|
|
if not name:
|
|
name = "Untitled"
|
|
num = 1
|
|
created = False
|
|
while not created:
|
|
text, created = models.Text.objects.get_or_create(name=name, user=request.user)
|
|
num += 1
|
|
name = data['name'] + ' [%d]' % num
|
|
|
|
del data['name']
|
|
if data:
|
|
text.edit(data, request.user)
|
|
else:
|
|
text.save()
|
|
|
|
if text.status == 'featured':
|
|
pos, created = models.Position.objects.get_or_create(text=text,
|
|
user=request.user, section='featured')
|
|
qs = models.Position.objects.filter(section='featured')
|
|
else:
|
|
pos, created = models.Position.objects.get_or_create(text=text,
|
|
user=request.user, section='personal')
|
|
qs = models.Position.objects.filter(user=request.user, section='personal')
|
|
pos.position = qs.aggregate(Max('position'))['position__max'] + 1
|
|
pos.save()
|
|
response = json_response(status=200, text='created')
|
|
response['data'] = text.json(user=request.user)
|
|
add_changelog(request, data, text.get_id())
|
|
return render_to_json_response(response)
|
|
actions.register(addText, cache=False)
|
|
|
|
def getText(request, data):
|
|
'''
|
|
Gets a text by id
|
|
takes {
|
|
id: string, // text id
|
|
keys: [string] // list of properties to return
|
|
}
|
|
returns {
|
|
id: string, // text id
|
|
key: value, // property and value
|
|
... // more key/value pairs
|
|
}
|
|
see: addText, findTexts, editText, removeText, sortTexts
|
|
'''
|
|
response = json_response()
|
|
public_id = data['id']
|
|
if public_id == '':
|
|
qs = models.Text.objects.filter(name='')
|
|
if qs.count() == 0:
|
|
text = None
|
|
response['data'] = {
|
|
'id': '',
|
|
'name': '',
|
|
'text': '',
|
|
'type': 'html',
|
|
'editable': not request.user.is_anonymous() and request.user.profile.capability('canEditFeaturedTexts')
|
|
}
|
|
else:
|
|
text = qs[0]
|
|
else:
|
|
text = get_text_or_404_json(data['id'])
|
|
if not text.accessible(request.user):
|
|
text = None
|
|
response['status']['code'] = 404
|
|
if text:
|
|
response['data'] = text.json(user=request.user, keys=data.get('keys'))
|
|
return render_to_json_response(response)
|
|
actions.register(getText)
|
|
|
|
|
|
@login_required_json
|
|
def editText(request, data):
|
|
'''
|
|
Edits a text
|
|
takes {
|
|
id: string, // text id
|
|
text: string, // text
|
|
public: boolean // if true, text is publix
|
|
}
|
|
returns {
|
|
id: string, // text id
|
|
... // more key/value pairs
|
|
}
|
|
see: addText, findTexts, getText, removeText, sortTexts
|
|
'''
|
|
response = json_response()
|
|
if data['id']:
|
|
public_id = data['id'].split(':')
|
|
username = public_id[0]
|
|
name = ":".join(public_id[1:])
|
|
text, created = models.Text.objects.get_or_create(name=name, user=models.User.objects.get(username=username))
|
|
if created:
|
|
text.user = request.user
|
|
else:
|
|
qs = models.Text.objects.filter(name='')
|
|
if qs.count() == 0:
|
|
if request.user.profile.capability('canEditFeaturedTexts'):
|
|
text = models.Text(name='', user=request.user)
|
|
text.save()
|
|
else:
|
|
response = json_response(status=403, text='permission denied')
|
|
return render_to_json_response(response)
|
|
else:
|
|
text = qs[0]
|
|
if text.editable(request.user):
|
|
text.edit(data, request.user)
|
|
response['data'] = text.json(user=request.user)
|
|
add_changelog(request, data, text.get_id())
|
|
else:
|
|
response = json_response(status=403, text='permission denied')
|
|
return render_to_json_response(response)
|
|
actions.register(editText, cache=False)
|
|
|
|
|
|
def _order_query(qs, sort):
|
|
order_by = []
|
|
for e in sort:
|
|
operator = e['operator']
|
|
if operator != '-':
|
|
operator = ''
|
|
key = {
|
|
'subscribed': 'subscribed_users',
|
|
'items': 'numberofitems'
|
|
}.get(e['key'], e['key'])
|
|
order = '%s%s' % (operator, key)
|
|
order_by.append(order)
|
|
if key == 'subscribers':
|
|
qs = qs.annotate(subscribers=Sum('subscribed_users'))
|
|
if order_by:
|
|
qs = qs.order_by(*order_by, nulls_last=True)
|
|
qs = qs.distinct()
|
|
return qs
|
|
|
|
def parse_query(data, user):
|
|
query = {}
|
|
query['range'] = [0, 100]
|
|
query['sort'] = [{'key':'user', 'operator':'+'}, {'key':'name', 'operator':'+'}]
|
|
for key in ('keys', 'group', 'text', 'range', 'position', 'positions', 'sort'):
|
|
if key in data:
|
|
query[key] = data[key]
|
|
query['qs'] = models.Text.objects.find(data, user).exclude(name='')
|
|
return query
|
|
|
|
|
|
def findTexts(request, data):
|
|
'''
|
|
Finds texts for a given query
|
|
takes {
|
|
keys: [], // list of keys to return, see `find`
|
|
query: object, // query object, see `find`
|
|
range: [int, int], // range of items to return
|
|
sort: [object], list of sort objects, see `find`
|
|
}
|
|
returns {
|
|
items: [object] // list of text objects
|
|
}
|
|
notes: Possible query keys are 'featured', 'name', 'subscribed' and 'user',
|
|
possible keys are 'featured', 'name', 'query', 'subscribed' and 'user'.
|
|
see: addText, editText, find, getText, removeText, sortTexts
|
|
'''
|
|
query = parse_query(data, request.user)
|
|
|
|
#order
|
|
is_section_request = query['sort'] == [{u'operator': u'+', u'key': u'position'}]
|
|
def is_featured_condition(x):
|
|
return x['key'] == 'status' and \
|
|
x['value'] == 'featured' and \
|
|
x['operator'] in ('=', '==')
|
|
is_featured = any(
|
|
is_featured_condition(x)
|
|
for x in data.get('query', {}).get('conditions', [])
|
|
)
|
|
|
|
if is_section_request:
|
|
qs = query['qs']
|
|
if not is_featured and not request.user.is_anonymous():
|
|
qs = qs.filter(position__in=models.Position.objects.filter(user=request.user))
|
|
qs = qs.order_by('position__position')
|
|
else:
|
|
qs = _order_query(query['qs'], query['sort'])
|
|
|
|
response = json_response()
|
|
if 'keys' in data:
|
|
qs = qs[query['range'][0]:query['range'][1]]
|
|
|
|
response['data']['items'] = [l.json(data['keys'], request.user) for l in qs]
|
|
elif 'position' in data:
|
|
#FIXME: actually implement position requests
|
|
response['data']['position'] = 0
|
|
elif 'positions' in data:
|
|
ids = [i.get_id() for i in qs]
|
|
response['data']['positions'] = utils.get_positions(ids, query['positions'])
|
|
else:
|
|
response['data']['items'] = qs.count()
|
|
return render_to_json_response(response)
|
|
actions.register(findTexts)
|
|
|
|
|
|
@login_required_json
|
|
def removeText(request, data):
|
|
'''
|
|
Removes a text
|
|
takes {
|
|
id: string // text id
|
|
}
|
|
returns {}
|
|
see: addText, editText, findTexts, getText, sortTexts
|
|
'''
|
|
text = get_text_or_404_json(data['id'])
|
|
response = json_response()
|
|
if text.editable(request.user):
|
|
add_changelog(request, data, text.get_id())
|
|
text.delete()
|
|
else:
|
|
response = json_response(status=403, text='not allowed')
|
|
return render_to_json_response(response)
|
|
actions.register(removeText, cache=False)
|
|
|
|
|
|
@login_required_json
|
|
def subscribeToText(request, data):
|
|
'''
|
|
Adds a text to favorites
|
|
takes {
|
|
id: string, // text id
|
|
user: string // username (admin-only)
|
|
}
|
|
returns {}
|
|
see: unsubscribeFromText
|
|
'''
|
|
text = get_text_or_404_json(data['id'])
|
|
user = request.user
|
|
if text.status == 'public' and \
|
|
text.subscribed_users.filter(username=user.username).count() == 0:
|
|
text.subscribed_users.add(user)
|
|
pos, created = models.Position.objects.get_or_create(text=text, user=user, section='public')
|
|
if created:
|
|
qs = models.Position.objects.filter(user=user, section='public')
|
|
pos.position = qs.aggregate(Max('position'))['position__max'] + 1
|
|
pos.save()
|
|
add_changelog(request, data, text.get_id())
|
|
response = json_response()
|
|
return render_to_json_response(response)
|
|
actions.register(subscribeToText, cache=False)
|
|
|
|
|
|
@login_required_json
|
|
def unsubscribeFromText(request, data):
|
|
'''
|
|
Removes a text from favorites
|
|
takes {
|
|
id: string // text id
|
|
user: string // username (admin-only)
|
|
}
|
|
returns {}
|
|
see: subscribeToText
|
|
'''
|
|
text = get_text_or_404_json(data['id'])
|
|
user = request.user
|
|
text.subscribed_users.remove(user)
|
|
models.Position.objects.filter(text=text, user=user, section='public').delete()
|
|
response = json_response()
|
|
add_changelog(request, data, text.get_id())
|
|
return render_to_json_response(response)
|
|
actions.register(unsubscribeFromText, cache=False)
|
|
|
|
|
|
@login_required_json
|
|
def sortTexts(request, data):
|
|
'''
|
|
Sets the order of texts in a given section
|
|
takes {
|
|
section: string, // 'personal', 'favorite' or 'featured'
|
|
ids: [string] // ordered list of text ids
|
|
}
|
|
returns {}
|
|
notes: Setting the order of featured texts requires the appropriate
|
|
capability.
|
|
see: addText, findTexts, getText, editText, removeText
|
|
'''
|
|
position = 0
|
|
section = data['section']
|
|
section = {
|
|
'favorite': 'public'
|
|
}.get(section,section)
|
|
#ids = list(set(data['ids']))
|
|
ids = data['ids']
|
|
if section == 'featured' and not request.user.profile.capability('canEditFeaturedTexts'):
|
|
response = json_response(status=403, text='not allowed')
|
|
else:
|
|
user = request.user
|
|
if section == 'featured':
|
|
for i in ids:
|
|
l = get_text_or_404_json(i)
|
|
qs = models.Position.objects.filter(section=section, text=l)
|
|
if qs.count() > 0:
|
|
pos = qs[0]
|
|
else:
|
|
pos = models.Position(text=l, user=user, section=section)
|
|
if pos.position != position:
|
|
pos.position = position
|
|
pos.save()
|
|
position += 1
|
|
models.Position.objects.filter(section=section, text=l).exclude(id=pos.id).delete()
|
|
else:
|
|
for i in ids:
|
|
l = get_text_or_404_json(i)
|
|
pos, created = models.Position.objects.get_or_create(text=l,
|
|
user=request.user, section=section)
|
|
if pos.position != position:
|
|
pos.position = position
|
|
pos.save()
|
|
position += 1
|
|
|
|
response = json_response()
|
|
return render_to_json_response(response)
|
|
actions.register(sortTexts, cache=False)
|
|
|
|
|
|
def icon(request, id, size=16):
|
|
if not size:
|
|
size = 16
|
|
|
|
id = id.split(':')
|
|
username = id[0]
|
|
textname = ":".join(id[1:])
|
|
qs = models.Text.objects.filter(user__username=username, name=textname)
|
|
if qs.count() == 1 and qs[0].accessible(request.user):
|
|
text = qs[0]
|
|
icon = text.get_icon(int(size))
|
|
else:
|
|
icon = os.path.join(settings.STATIC_ROOT, 'jpg/list256.jpg')
|
|
return HttpFileResponse(icon, content_type='image/jpeg')
|
|
|
|
def pdf_viewer(request, id):
|
|
text = get_text_or_404_json(id)
|
|
if text.type == 'pdf' and text.file and not text.uploading:
|
|
return render(request, 'pdf/viewer.html', {
|
|
'editable': json.dumps(text.editable(request.user)),
|
|
'embeds': json.dumps(text.embeds),
|
|
'settings': settings,
|
|
'url': text.get_absolute_pdf_url()
|
|
})
|
|
response = json_response(status=404, text='file not found')
|
|
return render_to_json_response(response)
|
|
|
|
def pdf(request, id):
|
|
id = id.replace('_', ' ').replace('\t', '_')
|
|
text = get_text_or_404_json(id)
|
|
if text.type == 'pdf' and text.file and not text.uploading:
|
|
return HttpFileResponse(text.file.path, content_type='application/pdf')
|
|
response = json_response(status=404, text='file not found')
|
|
return render_to_json_response(response)
|
|
|
|
@login_required_json
|
|
def upload(request):
|
|
text = get_text_or_404_json(request.POST['id'])
|
|
if text.editable(request.user):
|
|
#post next chunk
|
|
if 'chunk' in request.FILES:
|
|
if text.editable(request.user):
|
|
response = process_chunk(request, text.save_chunk)
|
|
response['resultUrl'] = request.build_absolute_uri(text.get_absolute_url())
|
|
return render_to_json_response(response)
|
|
return render_to_json_response(response)
|
|
#init upload
|
|
else:
|
|
text.uploading = True
|
|
if text.file:
|
|
text.file.delete()
|
|
text.save()
|
|
return render_to_json_response({
|
|
'uploadUrl': request.build_absolute_uri('/api/upload/text'),
|
|
'url': request.build_absolute_uri(text.get_absolute_url()),
|
|
'result': 1
|
|
})
|
|
else:
|
|
response = json_response(status=404, text='permission denied')
|
|
response = json_response(status=400, text='this request requires POST')
|
|
return render_to_json_response(response)
|
|
|
|
def text(request, id=''):
|
|
id = id.replace('_', ' ').replace('\t', '_')
|
|
try:
|
|
|
|
text = models.Text.get(id)
|
|
if id != '' and not text.accessible(request.user):
|
|
raise
|
|
template = 'text.html'
|
|
context = {
|
|
'base_url': request.build_absolute_uri('/'),
|
|
'description': ox.strip_tags(text.description),
|
|
'icon': request.build_absolute_uri('/text/%s/icon256.jpg' % text.get_id()),
|
|
'settings': settings,
|
|
'text': text,
|
|
'title': ox.strip_tags(text.name),
|
|
'url': request.build_absolute_uri(text.get_absolute_url()),
|
|
}
|
|
except:
|
|
template = 'index.html'
|
|
context = {
|
|
'base_url': request.build_absolute_uri('/'),
|
|
'settings': settings,
|
|
'title': settings.SITENAME
|
|
}
|
|
return render(request, template, context)
|