def generic(request):
queryset = get_user_model().objects
if request.query_params.get('followers'):
user_pk = get_int_or_404(request.query_params.get('followers'))
queryset = get_object_or_404(queryset, pk=user_pk).followed_by
elif request.query_params.get('follows'):
user_pk = get_int_or_404(request.query_params.get('follows'))
queryset = get_object_or_404(queryset, pk=user_pk).follows
if request.query_params.get('rank'):
rank_pk = get_int_or_404(request.query_params.get('rank'))
rank = get_object_or_404(Rank.objects, pk=rank_pk, is_tab=True)
queryset = queryset.filter(rank=rank)
if request.query_params.get('name'):
name_starts_with = request.query_params.get('name').strip().lower()
if name_starts_with:
queryset = queryset.filter(slug__startswith=name_starts_with)
else:
raise Http404()
queryset = queryset.select_related('rank', 'ban_cache', 'online_tracker')
paginator = Paginator()
users = paginator.paginate_queryset(queryset.order_by('slug'), request)
make_users_status_aware(users, request.user.acl)
return paginator.get_paginated_response(
UserSerializer(users, many=True).data)
def generic(request):
queryset = get_user_model().objects
if request.query_params.get('followers'):
user_pk = get_int_or_404(request.query_params.get('followers'))
queryset = get_object_or_404(queryset, pk=user_pk).followed_by
elif request.query_params.get('follows'):
user_pk = get_int_or_404(request.query_params.get('follows'))
queryset = get_object_or_404(queryset, pk=user_pk).follows
if request.query_params.get('rank'):
rank_pk = get_int_or_404(request.query_params.get('rank'))
rank = get_object_or_404(Rank.objects, pk=rank_pk, is_tab=True)
queryset = queryset.filter(rank=rank)
if request.query_params.get('name'):
name_starts_with = request.query_params.get('name').strip().lower()
if name_starts_with:
queryset = queryset.filter(slug__startswith=name_starts_with)
else:
raise Http404()
queryset = queryset.select_related('rank', 'ban_cache', 'online_tracker')
paginator = Paginator()
users = paginator.paginate_queryset(queryset.order_by('slug'), request)
make_users_status_aware(users, request.user.acl)
return paginator.get_paginated_response(
UserSerializer(users, many=True).data)
def fetch_forum(self, request, lock=False, **kwargs):
queryset = Forum.objects
if lock:
queryset = queryset.select_for_update()
return get_object_or_404(
queryset, id=kwargs.get('forum_id'), role='forum')
def decorator(request, *args, **kwargs):
User = get_user_model()
relations = ('rank', 'online_tracker', 'ban_cache')
queryset = User.objects.select_related(*relations)
profile = get_object_or_404(queryset, id=kwargs.pop('user_id'))
validate_slug(profile, kwargs.pop('user_slug'))
kwargs['profile'] = profile
add_acl(request.user, profile)
if profile.acl_['can_follow']:
profile.is_followed = request.user.is_following(profile)
else:
profile.is_followed = False
if profile.acl_['can_block'] and request.user.is_authenticated():
profile.is_blocked = request.user.is_blocking(profile)
else:
profile.is_blocked = False
if request.user.is_authenticated and request.method == "GET":
read_user_notification(request.user, "profile_%s" % profile.pk)
return f(request, *args, **kwargs)
def fetch_forum(self, request, lock=False, **kwargs):
queryset = Forum.objects
if lock:
queryset = queryset.select_for_update()
return get_object_or_404(
queryset, id=kwargs.get('forum_id'), role='forum')
def rank(request, rank_slug, page=0):
rank = get_object_or_404(Rank.objects.filter(is_tab=True), slug=rank_slug)
queryset = rank.user_set.select_related('rank').order_by('slug')
page = paginate(queryset, page, settings.MISAGO_USERS_PER_PAGE, 4)
paginator = pagination_dict(page)
request.frontend_context['USERS'] = dict(
results=UserSerializer(page.object_list, many=True).data,
**paginator
)
if rank.description:
description = {
'plain': rank.description,
'html': format_plaintext_for_html(rank.description)
}
else:
description = None
template = "misago/userslists/rank.html"
return render(request, template, {
'rank': rank,
'users': page.object_list,
'paginator': paginator
})
def rank(request, slug, page=0):
rank = get_object_or_404(Rank.objects.filter(is_tab=True), slug=slug)
queryset = rank.user_set.select_related('rank').order_by('slug')
if not request.user.is_staff:
queryset = queryset.filter(is_active=True)
page = paginate(queryset, page, settings.MISAGO_USERS_PER_PAGE, 4)
data = pagination_dict(page)
data.update({'results': UserSerializer(page.object_list, many=True).data})
request.frontend_context['USERS'] = data
if rank.description:
description = {
'plain': rank.description,
'html': format_plaintext_for_html(rank.description)
}
else:
description = None
template = "misago/userslists/rank.html"
return render(request, template, {
'rank': rank,
'users': page.object_list,
'paginator': data
})
def decorator(request, *args, **kwargs):
User = get_user_model()
relations = ('rank', 'online_tracker', 'ban_cache')
queryset = User.objects.select_related(*relations)
profile = get_object_or_404(queryset, id=kwargs.pop('user_id'))
validate_slug(profile, kwargs.pop('user_slug'))
kwargs['profile'] = profile
add_acl(request.user, profile)
if profile.acl_['can_follow']:
profile.is_followed = request.user.is_following(profile)
else:
profile.is_followed = False
if profile.acl_['can_block'] and request.user.is_authenticated():
profile.is_blocked = request.user.is_blocking(profile)
else:
profile.is_blocked = False
if request.user.is_authenticated and request.method == "GET":
read_user_notification(request.user, "profile_%s" % profile.pk)
return f(request, *args, **kwargs)
def decorator(request, forum_slug, forum_id):
allow_see_forum(request.user, forum_id)
forums = Forum.objects.all_forums()
forum = get_object_or_404(forums, pk=forum_id, role=role)
validate_slug(forum, forum_slug)
return f(request, forum)
def fetch_thread(self, request, lock=False, select_related=None, **kwargs):
queryset = Thread.objects
if lock:
queryset = queryset.select_for_update()
if select_related:
queryset = queryset.select_related(*select_related)
return get_object_or_404(queryset, id=kwargs.get('thread_id'))
def rank(request, queryset):
rank_slug = request.query_params.get('rank')
if not rank_slug:
return
rank = get_object_or_404(Rank.objects.filter(is_tab=True), slug=rank_slug)
queryset = queryset.filter(rank=rank).order_by('slug')
return {'queryset': queryset, 'paginate': True}
def fetch_post(self, request, lock=False, select_related=None,
queryset=None, **kwargs):
queryset = queryset or Post.objects
if lock:
queryset = queryset.select_for_update()
if select_related:
queryset = queryset.select_related(*select_related)
return get_object_or_404(queryset, id=kwargs.get('post_id'))
def patch_top_category(request, thread, value):
category_pk = get_int_or_404(value)
root_category = get_object_or_404(
Category.objects.all_categories(include_root=True), pk=category_pk)
categories = list(Category.objects.all_categories().filter(
id__in=request.user.acl['visible_categories']))
add_categories_to_threads(root_category, categories, [thread])
return {'top_category': CategorySerializer(thread.top_category).data}
def rank(request, queryset):
rank_slug = request.query_params.get('rank')
if not rank_slug:
return
rank = get_object_or_404(Rank.objects.filter(is_tab=True), slug=rank_slug)
queryset = queryset.filter(rank=rank).order_by('slug')
return {'queryset': queryset, 'paginate': True}
def decorator(request, *args, **kwargs):
queryset = get_user_model().objects.select_for_update()
user_id = kwargs.pop('user_id')
kwargs['user'] = get_object_or_404(queryset, id=user_id)
validate_slug(kwargs['user'], kwargs.pop('user_slug'))
add_acl(request.user, kwargs['user'])
if required_permission:
required_permission(request.user, kwargs['user'])
return f(request, *args, **kwargs)
def patch_top_category(request, thread, value):
category_pk = get_int_or_404(value)
root_category = get_object_or_404(
Category.objects.all_categories(include_root=True),
pk=category_pk
)
categories = list(Category.objects.all_categories().filter(
id__in=request.user.acl['visible_categories']
))
add_categories_to_items(root_category, categories, [thread])
return {'top_category': CategorySerializer(thread.top_category).data}
def get_thread(self, user, thread_id):
thread = get_object_or_404(Thread.objects.select_related('category'),
id=get_int_or_404(thread_id),
category__tree_id=self.TREE_ID,
)
add_acl(user, thread.category)
add_acl(user, thread)
self.validate_thread_visible(user, thread)
return thread
def decorator(request, *args, **kwargs):
queryset = get_user_model().objects.select_for_update()
user_id = kwargs.pop('user_id')
kwargs['user'] = get_object_or_404(queryset, id=user_id)
validate_slug(kwargs['user'], kwargs.pop('user_slug'))
add_acl(request.user, kwargs['user'])
if required_permission:
required_permission(request.user, kwargs['user'])
return f(request, *args, **kwargs)
def get_thread(self, user, thread_id):
thread = get_object_or_404(Thread.objects.select_related('category'),
id=get_int_or_404(thread_id),
category__tree_id=self.TREE_ID,
)
add_acl(user, thread.category)
add_acl(user, thread)
self.validate_thread_visible(user, thread)
return thread
def generic(request):
page = get_int_or_404(request.GET.get('page', 0))
if page == 1:
page = 0 # api allows explicit first page
allow_name_search = True
queryset = UserModel.objects
if not request.user.is_staff:
queryset = queryset.filter(is_active=True)
if request.query_params.get('followers'):
user_pk = get_int_or_404(request.query_params.get('followers'))
queryset = get_object_or_404(queryset, pk=user_pk).followed_by
elif request.query_params.get('follows'):
user_pk = get_int_or_404(request.query_params.get('follows'))
queryset = get_object_or_404(queryset, pk=user_pk).follows
elif request.query_params.get('rank'):
rank_pk = get_int_or_404(request.query_params.get('rank'))
rank = get_object_or_404(Rank.objects, pk=rank_pk, is_tab=True)
queryset = queryset.filter(rank=rank)
allow_name_search = False
else:
raise Http404() # don't use this api for searches
if request.query_params.get('name'):
name_starts_with = request.query_params.get('name').strip().lower()
if name_starts_with and allow_name_search:
queryset = queryset.filter(slug__startswith=name_starts_with)
else:
raise Http404()
queryset = queryset.select_related('rank', 'ban_cache',
'online_tracker').order_by('slug')
list_page = paginate(queryset, page, settings.MISAGO_USERS_PER_PAGE, 4)
make_users_status_aware(request.user, list_page.object_list)
return paginated_response(list_page, serializer=UserSerializer)
def read_threads(user, pk):
user.lock()
category_id = get_int_or_404(pk)
threads_tree_id = trees_map.get_tree_id_for_root(THREADS_ROOT_NAME)
category = get_object_or_404(Category, id=category_id, tree_id=threads_tree_id)
if category.level:
allow_see_category(user, category)
allow_browse_category(user, category)
read_category(user, category)
def decorator(request, *args, **kwargs):
User = get_user_model()
relations = ('rank', 'online_tracker', 'ban_cache')
queryset = User.objects.select_related(*relations)
profile = get_object_or_404(queryset, pk=kwargs.pop('pk'))
validate_slug(profile, kwargs.pop('slug'))
kwargs['profile'] = profile
add_acl(request.user, profile)
return f(request, *args, **kwargs)
def fetch_post(self,
request,
lock=False,
select_related=None,
queryset=None,
**kwargs):
queryset = queryset or Post.objects
if lock:
queryset = queryset.select_for_update()
if select_related:
queryset = queryset.select_related(*select_related)
return get_object_or_404(queryset, id=kwargs.get('post_id'))
def decorator(request, *args, **kwargs):
User = get_user_model()
relations = ('rank', 'online_tracker', 'ban_cache')
queryset = User.objects.select_related(*relations)
profile = get_object_or_404(queryset, pk=kwargs.pop('pk'))
validate_slug(profile, kwargs.pop('slug'))
kwargs['profile'] = profile
add_acl(request.user, profile)
return f(request, *args, **kwargs)
def read(self, request):
if request.query_params.get('category'):
category_id = get_int_or_404(request.query_params.get('category'))
category = get_object_or_404(Category.objects,
id=category_id,
tree_id=self.TREE_ID,
)
allow_see_category(request.user, category)
allow_browse_category(request.user, category)
else:
category = Category.objects.root_category()
read_category(request.user, category)
return Response({'detail': 'ok'})
def read(self, request):
if request.query_params.get('category'):
category_id = get_int_or_404(request.query_params.get('category'))
category = get_object_or_404(Category.objects,
id=category_id,
tree_id=self.TREE_ID,
)
allow_see_category(request.user, category)
allow_browse_category(request.user, category)
else:
category = Category.objects.root_category()
read_category(request.user, category)
return Response({'detail': 'ok'})
def get_category(self, request):
if request.query_params.get('category'):
category_id = get_int_or_404(request.query_params['category'])
category = get_object_or_404(
Category.objects.select_related('parent'),
tree_id=CATEGORIES_TREE_ID,
id=category_id,
)
allow_see_category(request.user, category)
allow_browse_category(request.user, category)
return category
else:
return Category.objects.root_category()
def fetch_thread(self, request, lock=False, select_related=None,
queryset=None, **kwargs):
queryset = queryset or Thread.objects
if lock:
queryset = queryset.select_for_update()
select_related = select_related or []
if not 'forum' in select_related:
select_related.append('forum')
queryset = queryset.select_related(*select_related)
where = {'id': kwargs.get('thread_id')}
if 'forum_id' in kwargs:
where['forum_id'] = kwargs.get('forum_id')
return get_object_or_404(queryset, **where)
def rank(request):
rank_slug = request.query_params.get('rank')
if not rank_slug:
raise Http404()
rank = get_object_or_404(Rank.objects, slug=rank_slug, is_tab=True)
queryset = rank.user_set.select_related(
'rank', 'ban_cache', 'online_tracker').order_by('slug')
paginator = Paginator()
users = paginator.paginate_queryset(queryset, request)
make_users_status_aware(users, request.user.acl)
return paginator.get_paginated_response(
UserSerializer(users, many=True).data)
def decorator(request, *args, **kwargs):
relations = ('rank', 'online_tracker', 'ban_cache')
queryset = UserModel.objects.select_related(*relations)
profile = get_object_or_404(queryset, pk=kwargs.pop('pk'))
if not profile.is_active and not request.user.is_staff:
raise Http404()
validate_slug(profile, kwargs.pop('slug'))
kwargs['profile'] = profile
add_acl(request.user, profile)
return f(request, *args, **kwargs)
def decorator(request, *args, **kwargs):
queryset = kwargs['user'].warnings
warning_id = kwargs.pop('warning_id')
kwargs['warning'] = get_object_or_404(queryset, id=warning_id)
add_acl(request.user, kwargs['warning'])
required_permission(request.user, kwargs['warning'])
response = f(request, *args, **kwargs)
if response:
return response
else:
return_path = moderation_return_path(request, kwargs['user'])
return redirect(return_path)
def decorator(request, *args, **kwargs):
queryset = kwargs['user'].warnings
warning_id = kwargs.pop('warning_id')
kwargs['warning'] = get_object_or_404(queryset, id=warning_id)
add_acl(request.user, kwargs['warning'])
required_permission(request.user, kwargs['warning'])
response = f(request, *args, **kwargs)
if response:
return response
else:
return_path = moderation_return_path(request, kwargs['user'])
return redirect(return_path)
def read_threads(user, pk):
user.lock()
category_id = get_int_or_404(pk)
threads_tree_id = trees_map.get_tree_id_for_root(THREADS_ROOT_NAME)
category = get_object_or_404(Category,
id=category_id,
tree_id=threads_tree_id,
)
if category.level:
allow_see_category(user, category)
allow_browse_category(user, category)
read_category(user, category)
def read(self, request):
if request.query_params.get('category'):
threads_tree_id = trees_map.get_tree_id_for_root(THREADS_ROOT_NAME)
category_id = get_int_or_404(request.query_params.get('category'))
category = get_object_or_404(Category,
id=category_id,
tree_id=threads_tree_id,
)
allow_see_category(request.user, category)
allow_browse_category(request.user, category)
else:
category = Category.objects.root_category()
read_category(request.user, category)
return Response({'detail': 'ok'})
def read(self, request):
if request.query_params.get('category'):
threads_tree_id = trees_map.get_tree_id_for_root(THREADS_ROOT_NAME)
category_id = get_int_or_404(request.query_params.get('category'))
category = get_object_or_404(Category,
id=category_id,
tree_id=threads_tree_id,
)
allow_see_category(request.user, category)
allow_browse_category(request.user, category)
else:
category = Category.objects.root_category()
read_category(request.user, category)
return Response({'detail': 'ok'})
def get_queryset(self):
queryset = UsernameChange.objects
if self.request.query_params.get('user'):
user_pk = get_int_or_404(self.request.query_params.get('user'))
queryset = get_object_or_404(
get_user_model().objects, pk=user_pk).namechanges
if self.request.query_params.get('search'):
search_phrase = self.request.query_params.get('search').strip()
if search_phrase:
queryset = queryset.filter(
Q(changed_by_username__istartswith=search_phrase) |
Q(new_username__istartswith=search_phrase) |
Q(old_username__istartswith=search_phrase))
return queryset.select_related('user', 'changed_by').order_by('-id')
def get_queryset(self):
queryset = UsernameChange.objects
if self.request.query_params.get('user'):
user_pk = get_int_or_404(self.request.query_params.get('user'))
queryset = get_object_or_404(UserModel.objects,
pk=user_pk).namechanges
if self.request.query_params.get('search'):
search_phrase = self.request.query_params.get('search').strip()
if search_phrase:
queryset = queryset.filter(
Q(changed_by_username__istartswith=search_phrase)
| Q(new_username__istartswith=search_phrase)
| Q(old_username__istartswith=search_phrase))
return queryset.select_related('user', 'changed_by').order_by('-id')
def read(self, request, pk):
request.user.lock()
category_id = get_int_or_404(pk)
threads_tree_id = trees_map.get_tree_id_for_root(THREADS_ROOT_NAME)
category = get_object_or_404(Category,
id=category_id,
tree_id=threads_tree_id,
)
if category.level:
allow_see_category(request.user, category)
allow_browse_category(request.user, category)
read_category(request.user, category)
return Response({'detail': 'ok'})
def patch_move(request, thread, value):
if thread.acl.get('can_move'):
category_pk = get_int_or_404(value)
new_category = get_object_or_404(
Category.objects.all_categories().select_related('parent'),
pk=category_pk
)
add_acl(request.user, new_category)
allow_see_category(request.user, new_category)
allow_browse_category(request.user, new_category)
moderation.move_thread(request.user, thread, new_category)
return {'category': CategorySerializer(new_category).data}
else:
raise PermissionDenied(
_("You don't have permission to move this thread."))
def fetch_thread(self,
request,
lock=False,
select_related=None,
queryset=None,
**kwargs):
queryset = queryset or Thread.objects
if lock:
queryset = queryset.select_for_update()
select_related = select_related or []
if not 'forum' in select_related:
select_related.append('forum')
queryset = queryset.select_related(*select_related)
where = {'id': kwargs.get('thread_id')}
if 'forum_id' in kwargs:
where['forum_id'] = kwargs.get('forum_id')
return get_object_or_404(queryset, **where)
def patch_move(request, thread, value):
if thread.acl.get('can_move'):
category_pk = get_int_or_404(value)
new_category = get_object_or_404(
Category.objects.all_categories().select_related('parent'),
pk=category_pk
)
add_acl(request.user, new_category)
allow_see_category(request.user, new_category)
allow_browse_category(request.user, new_category)
allow_start_thread(request.user, new_category)
moderation.move_thread(request.user, thread, new_category)
return {'category': CategorySerializer(new_category).data}
else:
raise PermissionDenied(
_("You don't have permission to move this thread."))
def get_user(self, request, pk):
user = get_object_or_404(self.get_queryset(), pk=get_int_or_404(pk))
if not user.is_active and not request.user.is_staff:
raise Http404()
return user
def rank(request, rank_slug, page=0):
rank = get_object_or_404(Rank.objects.filter(is_tab=True), slug=rank_slug)
queryset = rank.user_set.order_by('slug')
template = "misago/userslists/rank.html"
return list_view(request, template, queryset, page, {'rank': rank})
def get_user(self, pk):
return get_object_or_404(self.get_queryset(), pk=get_int_or_404(pk))
def get_edit_by_pk(post, pk):
return get_object_or_404(post.edits_record, pk=get_int_or_404(pk))
def rank(request, rank_slug, page=0):
rank = get_object_or_404(Rank.objects.filter(is_tab=True), slug=rank_slug)
queryset = rank.user_set.order_by('slug')
template = "misago/userslists/rank.html"
return list_view(request, template, queryset, page, {'rank': rank})
def get_edit_by_pk(post, pk):
return get_object_or_404(post.edits_record, pk=get_int_or_404(pk))
def get_user(self, pk):
return get_object_or_404(self.get_queryset(), pk=get_int_or_404(pk))
