201 lines
8.7 KiB
Python
201 lines
8.7 KiB
Python
from django import forms
|
|
from django.contrib.auth.models import Permission
|
|
from django.contrib.contenttypes.models import ContentType
|
|
from django.utils.translation import ugettext as _
|
|
from django.utils.translation import ugettext_lazy, ugettext_noop
|
|
|
|
from openslides.config.api import ConfigGroup, ConfigGroupedCollection, ConfigVariable
|
|
|
|
from .api import create_or_reset_admin_user
|
|
from .models import Group
|
|
|
|
|
|
def setup_users_config(sender, **kwargs):
|
|
"""
|
|
Receiver function to setup all users config variables. It is connected
|
|
to the signal openslides.config.signals.config_signal during app loading.
|
|
"""
|
|
# General
|
|
users_sort_users_by_first_name = ConfigVariable(
|
|
name='users_sort_users_by_first_name',
|
|
default_value=False,
|
|
form_field=forms.BooleanField(
|
|
required=False,
|
|
label=ugettext_lazy('Sort users by first name'),
|
|
help_text=ugettext_lazy('Disable for sorting by last name')))
|
|
|
|
group_general = ConfigGroup(
|
|
title=ugettext_lazy('Sorting'),
|
|
variables=(users_sort_users_by_first_name,))
|
|
|
|
# PDF
|
|
users_pdf_welcometitle = ConfigVariable(
|
|
name='users_pdf_welcometitle',
|
|
default_value=_('Welcome to OpenSlides!'),
|
|
translatable=True,
|
|
form_field=forms.CharField(
|
|
widget=forms.Textarea(),
|
|
required=False,
|
|
label=ugettext_lazy('Title for access data and welcome PDF')))
|
|
|
|
users_pdf_welcometext = ConfigVariable(
|
|
name='users_pdf_welcometext',
|
|
default_value=_('[Place for your welcome and help text.]'),
|
|
translatable=True,
|
|
form_field=forms.CharField(
|
|
widget=forms.Textarea(),
|
|
required=False,
|
|
label=ugettext_lazy('Help text for access data and welcome PDF')))
|
|
|
|
users_pdf_url = ConfigVariable(
|
|
name='users_pdf_url',
|
|
default_value='http://example.com:8000',
|
|
form_field=forms.CharField(
|
|
widget=forms.TextInput(),
|
|
required=False,
|
|
label=ugettext_lazy('System URL'),
|
|
help_text=ugettext_lazy('Used for QRCode in PDF of access data.')))
|
|
|
|
users_pdf_wlan_ssid = ConfigVariable(
|
|
name='users_pdf_wlan_ssid',
|
|
default_value='',
|
|
form_field=forms.CharField(
|
|
widget=forms.TextInput(),
|
|
required=False,
|
|
label=ugettext_lazy('WLAN name (SSID)'),
|
|
help_text=ugettext_lazy('Used for WLAN QRCode in PDF of access data.')))
|
|
|
|
users_pdf_wlan_password = ConfigVariable(
|
|
name='users_pdf_wlan_password',
|
|
default_value='',
|
|
form_field=forms.CharField(
|
|
widget=forms.TextInput(),
|
|
required=False,
|
|
label=ugettext_lazy('WLAN password'),
|
|
help_text=ugettext_lazy('Used for WLAN QRCode in PDF of access data.')))
|
|
|
|
users_pdf_wlan_encryption = ConfigVariable(
|
|
name='users_pdf_wlan_encryption',
|
|
default_value='',
|
|
form_field=forms.ChoiceField(
|
|
widget=forms.Select(),
|
|
required=False,
|
|
label=ugettext_lazy('WLAN encryption'),
|
|
help_text=ugettext_lazy('Used for WLAN QRCode in PDF of access data.'),
|
|
choices=(
|
|
('', '---------'),
|
|
('WEP', 'WEP'),
|
|
('WPA', 'WPA/WPA2'),
|
|
('nopass', ugettext_lazy('No encryption')))))
|
|
|
|
group_pdf = ConfigGroup(
|
|
title=ugettext_lazy('PDF'),
|
|
variables=(users_pdf_welcometitle,
|
|
users_pdf_welcometext,
|
|
users_pdf_url,
|
|
users_pdf_wlan_ssid,
|
|
users_pdf_wlan_password,
|
|
users_pdf_wlan_encryption))
|
|
|
|
return ConfigGroupedCollection(
|
|
title=ugettext_noop('Users'),
|
|
url='users',
|
|
weight=50,
|
|
groups=(group_general, group_pdf))
|
|
|
|
|
|
def create_builtin_groups_and_admin(sender, **kwargs):
|
|
"""
|
|
Receiver function to builtin groups and the admin user.
|
|
|
|
Creates the builtin groups: Anonymous, Registered, Delegates and Staff.
|
|
|
|
Creates the builtin user: admin.
|
|
|
|
It is connected to the signal
|
|
openslides.core.signals.post_database_setup during app loading.
|
|
"""
|
|
# Check whether the group pks 1 to 4 are free
|
|
if Group.objects.filter(pk__in=range(1, 5)).exists():
|
|
# Do completely nothing if there are already some of our groups in the database.
|
|
return
|
|
|
|
# Anonymous (pk 1) and Registered (pk 2)
|
|
ct_core = ContentType.objects.get(app_label='core', model='customslide')
|
|
perm_11 = Permission.objects.get(content_type=ct_core, codename='can_see_projector')
|
|
perm_12 = Permission.objects.get(content_type=ct_core, codename='can_see_dashboard')
|
|
|
|
ct_agenda = ContentType.objects.get(app_label='agenda', model='item')
|
|
ct_speaker = ContentType.objects.get(app_label='agenda', model='speaker')
|
|
perm_13 = Permission.objects.get(content_type=ct_agenda, codename='can_see_agenda')
|
|
perm_14 = Permission.objects.get(content_type=ct_agenda, codename='can_see_orga_items')
|
|
can_speak = Permission.objects.get(content_type=ct_speaker, codename='can_be_speaker')
|
|
|
|
ct_motion = ContentType.objects.get(app_label='motion', model='motion')
|
|
perm_15 = Permission.objects.get(content_type=ct_motion, codename='can_see_motion')
|
|
|
|
ct_assignment = ContentType.objects.get(app_label='assignment', model='assignment')
|
|
perm_16 = Permission.objects.get(content_type=ct_assignment, codename='can_see_assignment')
|
|
|
|
ct_users = ContentType.objects.get(app_label='users', model='user')
|
|
perm_17 = Permission.objects.get(content_type=ct_users, codename='can_see')
|
|
|
|
ct_mediafile = ContentType.objects.get(app_label='mediafile', model='mediafile')
|
|
perm_18 = Permission.objects.get(content_type=ct_mediafile, codename='can_see')
|
|
|
|
group_anonymous = Group.objects.create(name=ugettext_noop('Anonymous'), pk=1)
|
|
group_anonymous.permissions.add(perm_11, perm_12, perm_13, perm_14, perm_15, perm_16, perm_17, perm_18)
|
|
group_registered = Group.objects.create(name=ugettext_noop('Registered'), pk=2)
|
|
group_registered.permissions.add(perm_11, perm_12, perm_13, perm_14, perm_15, perm_16, perm_17, perm_18, can_speak)
|
|
|
|
# Delegates (pk 3)
|
|
perm_31 = Permission.objects.get(content_type=ct_motion, codename='can_create_motion')
|
|
perm_32 = Permission.objects.get(content_type=ct_motion, codename='can_support_motion')
|
|
perm_33 = Permission.objects.get(content_type=ct_assignment, codename='can_nominate_other')
|
|
perm_34 = Permission.objects.get(content_type=ct_assignment, codename='can_nominate_self')
|
|
perm_35 = Permission.objects.get(content_type=ct_mediafile, codename='can_upload')
|
|
|
|
group_delegates = Group.objects.create(name=ugettext_noop('Delegates'), pk=3)
|
|
group_delegates.permissions.add(perm_31, perm_32, perm_33, perm_34, perm_35)
|
|
|
|
# Staff (pk 4)
|
|
perm_41 = Permission.objects.get(content_type=ct_agenda, codename='can_manage_agenda')
|
|
perm_42 = Permission.objects.get(content_type=ct_motion, codename='can_manage_motion')
|
|
perm_43 = Permission.objects.get(content_type=ct_assignment, codename='can_manage_assignment')
|
|
perm_44 = Permission.objects.get(content_type=ct_users, codename='can_manage')
|
|
perm_45 = Permission.objects.get(content_type=ct_core, codename='can_manage_projector')
|
|
perm_46 = Permission.objects.get(content_type=ct_core, codename='can_use_chat')
|
|
perm_47 = Permission.objects.get(content_type=ct_mediafile, codename='can_manage')
|
|
|
|
ct_config = ContentType.objects.get(app_label='config', model='configstore')
|
|
perm_48 = Permission.objects.get(content_type=ct_config, codename='can_manage')
|
|
|
|
ct_tag = ContentType.objects.get(app_label='core', model='tag')
|
|
can_manage_tags = Permission.objects.get(content_type=ct_tag, codename='can_manage_tags')
|
|
|
|
group_staff = Group.objects.create(name=ugettext_noop('Staff'), pk=4)
|
|
# add delegate permissions (without can_support_motion)
|
|
group_staff.permissions.add(perm_31, perm_33, perm_34, perm_35)
|
|
# add staff permissions
|
|
group_staff.permissions.add(perm_41, perm_42, perm_43, perm_44, perm_45, perm_46, perm_47, perm_48, can_manage_tags)
|
|
# add can_see_user permission
|
|
group_staff.permissions.add(perm_17) # TODO: Remove this redundancy after cleanup of the permission system
|
|
|
|
# Admin user
|
|
create_or_reset_admin_user()
|
|
|
|
|
|
def user_post_save(sender, instance, *args, **kwargs):
|
|
"""
|
|
Receiver function to add a new user to the registered group. It is
|
|
connected to the signal django.db.models.signals.post_save during app
|
|
loading.
|
|
"""
|
|
if not kwargs['created']:
|
|
return
|
|
|
|
from openslides.users.api import get_registered_group # TODO: Test, if global import is possible
|
|
registered = get_registered_group()
|
|
instance.groups.add(registered)
|
|
instance.save()
|