def ajax_delete_publication(request, organization_slug):
organization = get_object_or_404(Organization, slug=organization_slug)
publication_uid = request.POST.get("uid")
if publication_uid:
publication_uids = [publication_uid]
else:
publication_uids = request.POST.getlist("uid[]")
if not publication_uids:
raise Http404
publications = []
for publication_uid in publication_uids:
try:
publication = Publication.objects.get(uid=publication_uid)
except Publication.DoesNotExist:
continue
if get_permission_backend(request).can_edit_publication(
request.user, organization, {"publication": publication}
):
publications.append(publication)
if not publications:
return response_json_error("invalid-publication")
domain_functions.delete_publications(publications)
return response_json_success()
def ajax_edit_responsible_project(request):
if not request.user.get_profile().primary_role == Role.objects.get(code='section_assistant'):
raise Http404
else:
if request.method == 'POST':
action = request.POST.get('action')
project_id = request.POST.get('project_id')
try:
project = Project.objects.get(id=project_id)
except Project.DoesNotExist:
return response_json_error('project-notfound')
if action == 'add':
ProjectResponsibility.objects.get_or_create(user=request.user, project=project)
elif action == 'remove':
try:
ProjectResponsibility.objects.get(user=request.user, project=project).delete()
except ProjectResponsibility.DoesNotExist:
pass
else:
return response_json_error('action-notfound')
return response_json_success()
else:
raise Http404
def ajax_remove_managing_project(request):
if not request.user.is_staff: raise Http403
if request.method == 'POST':
user_id = request.POST.get('user_id')
project_id = request.POST.get('project_id')
try:
user = User.objects.get(id=user_id)
except User.DoesNotExist:
return response_json_error('user-notfound')
if not user.get_profile().is_project_manager():
return response_json_error('user-invalid')
try:
project = Project.objects.get(id=project_id)
except Project.DoesNotExist:
return response_json_error('project-notfound')
try:
ProjectManager.objects.get(user=user, project=project).delete()
except ProjectManager.DoesNotExist:
pass
return response_json_success()
def ajax_query_publication(request, publication_uid):
publication = get_object_or_404(Publication, uid=publication_uid)
permission_backend = get_permission_backend(request)
if not permission_backend.can_view_publication(
request.user, publication.organization, {"publication": publication}
):
raise Http404
return response_json_success(
{
"uid": str(publication.uid),
"title": publication.title,
"description": publication.description,
"tag_names": ",".join([tag.tag_name for tag in publication.tags.all()]),
"uploaded": format_abbr_datetime(publication.uploaded),
"uploaded_by": publication.uploaded_by.get_profile().get_fullname(),
"file_ext": publication.file_ext,
"file_size_text": humanize_file_size(publication.uploaded_file.file.size),
"shelves": ",".join([str(shelf.id) for shelf in publication.shelves.all()]),
"thumbnail_url": publication.get_large_thumbnail(),
"download_url": reverse("download_publication", args=[publication.uid]),
"readonly": "true"
if not permission_backend.can_edit_publication(
request.user, publication.organization, {"publication": publication}
)
else "false",
}
)
def ajax_edit_responsible_project(request):
if not request.user.get_profile().primary_role == Role.objects.get(
code='section_assistant'):
raise Http404
else:
if request.method == 'POST':
action = request.POST.get('action')
project_id = request.POST.get('project_id')
try:
project = Project.objects.get(id=project_id)
except Project.DoesNotExist:
return response_json_error('project-notfound')
if action == 'add':
ProjectResponsibility.objects.get_or_create(user=request.user,
project=project)
elif action == 'remove':
try:
ProjectResponsibility.objects.get(
user=request.user, project=project).delete()
except ProjectResponsibility.DoesNotExist:
pass
else:
return response_json_error('action-notfound')
return response_json_success()
else:
raise Http404
def ajax_remove_managing_project(request):
if not request.user.is_staff: raise Http403
if request.method == 'POST':
user_id = request.POST.get('user_id')
project_id = request.POST.get('project_id')
try:
user = User.objects.get(id=user_id)
except User.DoesNotExist:
return response_json_error('user-notfound')
if not user.get_profile().is_project_manager():
return response_json_error('user-invalid')
try:
project = Project.objects.get(id=project_id)
except Project.DoesNotExist:
return response_json_error('project-notfound')
try:
ProjectManager.objects.get(user=user, project=project).delete()
except ProjectManager.DoesNotExist:
pass
return response_json_success()
def ajax_exist_transaction(request, transaction_id):
try:
payment = OrganizationPaypalPayment.objects.get(transaction_id=transaction_id)
return response_json_success(
{"redirect_url": reverse("organization_make_payment", args=[payment.invoice.organization.slug])}
)
except OrganizationPaypalPayment.DoesNotExist:
return response_json_error("not-exists")
def replace_publication(request, organization_slug):
organization = get_object_or_404(Organization, slug=organization_slug)
publication_id = request.POST.get("publication_id")
print publication_id
if publication_id:
publication = get_object_or_404(Publication, uid=publication_id)
else:
transaction.rollback()
raise Http404
if not get_permission_backend(request).can_edit_publication(
request.user, publication.organization, {"publication": publication}
):
transaction.rollback()
raise Http404
try:
file = request.FILES[u"files[]"]
if file.size > settings.MAX_PUBLICATION_FILE_SIZE:
transaction.rollback()
return response_json_error("file-size-exceed")
uploading_file = UploadedFile(file)
publication = domain_functions.replace_publication(request, uploading_file, publication)
if not publication:
transaction.rollback()
return response_json_error()
transaction.commit()
try:
generate_thumbnails.delay(publication.uid)
except:
import sys
import traceback
logger.critical(traceback.format_exc(sys.exc_info()[2]))
return response_json_success(
{
"uid": str(publication.uid),
"file_ext": publication.file_ext,
"file_size": humanize_file_size(uploading_file.file.size),
"uploaded": format_abbr_datetime(publication.uploaded),
"replaced": format_abbr_datetime(publication.replaced),
"thumbnail_url": publication.get_large_thumbnail(),
"download_url": reverse("download_publication", args=[publication.uid]),
}
)
except:
transaction.rollback()
return response_json_error()
def upload_publication(request, organization_slug):
organization = get_object_or_404(Organization, slug=organization_slug)
shelf_id = request.POST.get("shelf")
if shelf_id:
shelf = get_object_or_404(OrganizationShelf, pk=shelf_id)
else:
transaction.rollback()
raise Http404
if shelf.organization.id != organization.id or not get_permission_backend(request).can_upload_shelf(
request.user, organization, {"shelf": shelf}
):
transaction.rollback()
raise Http404
try:
file = request.FILES[u"files[]"]
if file.size > settings.MAX_PUBLICATION_FILE_SIZE:
transaction.rollback()
return response_json_error("file-size-exceed")
uploading_file = UploadedFile(file)
publication = domain_functions.upload_publication(request, uploading_file, organization, shelf)
if not publication:
transaction.rollback()
return response_json_error()
transaction.commit() # Need to commit before create task
try:
generate_thumbnails.delay(publication.uid)
except:
import sys
import traceback
logger.critical(traceback.format_exc(sys.exc_info()[2]))
return response_json_success(
{
"uid": str(publication.uid),
"title": publication.title,
"file_ext": publication.file_ext,
"file_size_text": humanize_file_size(uploading_file.file.size),
"shelf": shelf.id if shelf else "",
"uploaded": format_abbr_datetime(publication.uploaded),
"thumbnail_url": publication.get_large_thumbnail(),
"download_url": reverse("download_publication", args=[publication.uid]),
}
)
except:
transaction.rollback()
return response_json_error()
def ajax_cancel_organization_invitation(request, invitation_id):
if not request.user.is_superuser:
raise Http404
if request.is_ajax():
invitation = get_object_or_404(OrganizationInvitation, pk=invitation_id)
invitation.delete()
messages.success(request, u'เพิกถอนคำขอบริษัทเรียบร้อย')
return response_json_success({'redirect_url':reverse('view_organizations_invited')})
else:
raise Http404
def ajax_query_organization_shelves(request, organization_slug):
organization = get_object_or_404(Organization, slug=organization_slug)
permission_backend = get_permission_backend(request)
if not permission_backend.can_view_organization(request.user, organization):
raise Http404
shelves_json = []
for shelf in permission_backend.get_viewable_shelves(request.user, organization):
shelves_json.append({"id": shelf.id, "name": shelf.name, "document_count": shelf.num_of_documents})
return response_json_success({"shelves": shelves_json})
def ajax_remove_organization_group(request, organization_group_id):
if request.is_ajax():
group = get_object_or_404(OrganizationGroup, pk=organization_group_id)
organization = group.organization
if not get_permission_backend(request).can_manage_group(request.user, organization):
raise Http404
UserGroup.objects.filter(group=group).delete()
group.delete()
messages.success(request, _("Deleted user groups successful"))
return response_json_success({"redirect_url": reverse("view_organization_groups", args=[organization.slug])})
else:
raise Http404
def ajax_resend_organization_invitation(request, invitation_id):
if not request.user.is_superuser:
raise Http404
if request.is_ajax():
invitation = get_object_or_404(OrganizationInvitation, pk=invitation_id)
if invitation.send_invitation_email():
invitation.created = now()
invitation.save()
return response_json_success()
else:
return response_json_error('send-invitation-failed')
else:
raise Http404
def ajax_remove_organization_user(request, organization_user_id):
if request.is_ajax():
user_organization = get_object_or_404(UserOrganization, pk=organization_user_id)
organization = user_organization.organization
if not get_permission_backend(request).can_manage_user(request.user, organization):
raise Http404
user_organization.is_active = False
user_organization.modified = datetime.datetime.now()
user_organization.save()
messages.success(request, _("Removed user from organization successful"))
return response_json_success({"redirect_url": reverse("view_organization_users", args=[organization.slug])})
else:
raise Http404
def ajax_cancel_user_invitation(request, invitation_id):
if request.is_ajax():
invitation = get_object_or_404(UserOrganizationInvitation, pk=invitation_id)
organization = invitation.organization
if not get_permission_backend(request).can_manage_user(request.user, organization):
raise Http404
invitation.delete()
messages.success(request, _("Cancelled user invitation successful"))
return response_json_success(
{"redirect_url": reverse("view_organization_invited_users", args=[organization.slug])}
)
else:
raise Http404
def ajax_resend_user_invitation(request, invitation_id):
if request.is_ajax():
invitation = get_object_or_404(UserOrganizationInvitation, pk=invitation_id)
organization = invitation.organization
if not get_permission_backend(request).can_manage_user(request.user, organization):
raise Http404
if invitation.send_invitation_email():
invitation.created = now()
invitation.save()
return response_json_success()
else:
return response_json_error("send-invitation-failed")
else:
raise Http404
def ajax_add_publications_tag(request, organization_slug):
organization = get_object_or_404(Organization, slug=organization_slug)
publication_uids = request.POST.getlist("publication[]")
tag_names = request.POST.get("tags")
if tag_names:
publications = []
for publication_uid in publication_uids:
try:
publication = Publication.objects.get(uid=publication_uid)
except Publication.DoesNotExist:
continue
if get_permission_backend(request).can_edit_publication(
request.user, organization, {"publication": publication}
):
publications.append(publication)
tag_names = tag_names.split(",")
saved_tag_names = []
if publications and tag_names:
for tag_name in tag_names:
if tag_name and len(tag_name.strip()) > 0:
tag_name = tag_name.lower().strip()
try:
tag = OrganizationTag.objects.get(organization=organization, tag_name=tag_name)
except OrganizationTag.DoesNotExist:
tag = OrganizationTag.objects.create(organization=organization, tag_name=tag_name)
for publication in publications:
publication_tag, created = PublicationTag.objects.get_or_create(
publication=publication, tag=tag
)
if created:
saved_tag_names.append(tag_name)
return response_json_success({"tag_names": saved_tag_names})
else:
return response_json_error("invalid-publication")
else:
return response_json_error("missing-parameter")
def ajax_autosave_editing_story(request, story_uid):
try:
story = Story.objects.get(uid=story_uid)
if story.created_by.id != request.user.id:
raise Http404
except Story.DoesNotExist:
story = Story.objects.create(uid=story_uid, is_draft=True, created_by=request.user)
editing_story, created = EditingStory.objects.get_or_create(story=story)
story_editing_content, created = StoryEditingContent.objects.get_or_create(editing_story=editing_story)
content = request.POST.get('id_body')
if content:
content = urllib2.unquote(content).decode("utf8")
story_editing_content.body = content
story_editing_content.save()
return response_json_success()
def ajax_edit_publication(request, organization_slug):
organization = get_object_or_404(Organization, slug=organization_slug)
publication_uid = request.POST.get("uid")
title = request.POST.get("title")
description = request.POST.get("description")
tag_names = request.POST.get("tags")
try:
publication = Publication.objects.get(uid=publication_uid)
except Publication.DoesNotExist:
return response_json_error("publication-notfound")
if not get_permission_backend(request).can_edit_publication(
request.user, organization, {"publication": publication}
):
raise Http404
if not title:
return response_json_error("parameter-missing")
publication.title = title
publication.description = description
publication.modified = now()
publication.modified_by = request.user
publication.save()
PublicationTag.objects.filter(publication=publication).delete()
saved_tag_names = []
tag_names = tag_names.split(",")
for tag_name in tag_names:
if tag_name and len(tag_name.strip()) > 0:
tag_name = tag_name.lower().strip()
try:
tag = OrganizationTag.objects.get(organization=organization, tag_name=tag_name)
except OrganizationTag.DoesNotExist:
tag = OrganizationTag.objects.create(organization=organization, tag_name=tag_name)
PublicationTag.objects.get_or_create(publication=publication, tag=tag)
saved_tag_names.append(tag_name)
return response_json_success({"tag_names": saved_tag_names})
def ajax_bringback_organization_user(request, organization_user_id):
if request.is_ajax():
user_organization = get_object_or_404(UserOrganization, pk=organization_user_id)
organization = user_organization.organization
if not get_permission_backend(request).can_manage_user(request.user, organization):
raise Http404
invoice = organization.get_latest_invoice()
if (user_organization.modified + relativedelta(months=+1)).date() < invoice.end_date:
organization.update_latest_invoice()
user_organization.is_active = True
user_organization.modified = datetime.datetime.now()
user_organization.save()
messages.success(request, _("Brought user back to organization successful"))
return response_json_success({"redirect_url": reverse("view_organization_users", args=[organization.slug])})
else:
raise Http404