Beispiel #1
0
def main(request):
    """ Respond to the "/admin" URL.
    """
    if admin_sessions.user_logged_in(request):
        return redirect("/admin/menu")
    else:
        return redirect("/admin/login")
Beispiel #2
0
def menu(request):
    """ Respond to the "/admin" URL.
    """
    if not admin_sessions.user_logged_in(request):
        return redirect("/admin/login")

    return render(request, "menu.html")
Beispiel #3
0
def params(request):
    """ Respond to the "/admin/report_params" URL.
    """
    if not admin_sessions.user_logged_in(request):
        return redirect("/admin/login")

    return render(request, "report_params.html")
Beispiel #4
0
def edit_user(request, user_id):
    """ Respond to the "/admin/edit_user
    """
    if not admin_sessions.user_logged_in(request):
        return redirect("/admin/login")

    return HttpResponse("More to come...")
Beispiel #5
0
def logout(request):
    """ Respond to the "/admin/logout" URL.
    """
    if not admin_sessions.user_logged_in(request):
        return redirect("/admin/login")

    session_token = request.COOKIES["mm_admin"]
    admin_sessions.delete(session_token)

    return redirect("/admin/login")
Beispiel #6
0
def login(request):
    """ Respond to the "/admin/login" URL.
    """
    if admin_sessions.user_logged_in(request):
        return redirect("/admin/menu")

    if request.method == "POST":
        password = request.POST["password"]
    else:
        password = None

    if password != None:
        if hashlib.md5(password.lower()).hexdigest() == PASSWORD_DIGEST:
            session_id = admin_sessions.create()
            response = redirect("/admin/menu")
            response.set_cookie("mm_admin", session_id)
            return response
        else:
            err_msg = "incorrect password"
    else:
        err_msg = None

    return render(request, "login.html", {"err_msg": err_msg})
Beispiel #7
0
def user_list(request):
    """ Respond to the "/admin/user_list" URL.
    """
    if not admin_sessions.user_logged_in(request):
        return redirect("/admin/login")

    if request.method == "GET":
        params = request.GET
    elif request.method == "POST":
        params = request.POST
    else:
        raise RuntimeError("Unknown request.method: " + repr(request.method))

    user_list = User.objects.order_by("username", "phone_number")

    paginator = Paginator(user_list, 10) # Show 10 users per page.

    page_num = params.get("page", 0)

    try:
        page = paginator.page(page_num)
    except (PageNotAnInteger, EmptyPage):
        # Invalid page -> show the first page.
        page = paginator.page(1)

    if request.method == "GET":

        # We're displaying the page for the first time.  Process our CGI
        # parameters, if any.

        confirm = request.GET.get("confirm")

    elif request.method == "POST":

        # Respond to the user clicking on one of our buttons.

        # Did the user click on one of our "Edit" buttons?  We redirect the
        # user to the "Edit" page for the associated user.

        for user in user_list:
            editValue = request.POST.get("edit-" + str(user.id))
            if editValue == "Edit":
                return redirect("/admin/edit_user/" + str(user.id))

        # Did the user click on one of our "Delete" buttons?  We firstly
        # display the confirmation button beside the entry, and only delete the
        # entry if the user confirms.

        for user in user_list:
            deleteValue = request.POST.get("del-" + str(user.id))
            if deleteValue == "Delete":
                # The user clicked on the "Delete" button for the first time ->
                # redisplay the page with the confirmation buttons.
                return redirect("/admin/user_list?page=" + str(page_num) +
                                "&confirm=" + str(user.id))
            elif deleteValue == "Yes":
                # The user clicked on our "Yes" confirmation button.  Delete
                # this user and redisplay the page.
                user.delete()
                return redirect("/admin/user_list?page=" + str(page_num))
            elif deleteValue == "No":
                # The user clicked on the "No" confirmation button.  Redisplay
                # the page without the confirmation buttons.
                return redirect("/admin/user_list?page=" + str(page_num))

        # If we get here, we're going to display the page again.  Grab our
        # "confirm" CGI parameter so the page can display the appropriate
        # confirmation buttons.

        confirm = request.POST.get("confirm")

    return render(request, "user_list.html",
                  {'page'    : page,
                   'confirm' : confirm})