mirror of
https://github.com/jwinterm/modoboa.git
synced 2026-10-18 05:51:26 +02:00
545 lines
21 KiB
Python
545 lines
21 KiB
Python
# -*- coding: utf-8 -*-
|
|
from django.http import HttpResponse, HttpResponseRedirect
|
|
from django.utils import simplejson
|
|
from django.utils.translation import ugettext as _
|
|
from django.utils.http import urlquote
|
|
from django.core.urlresolvers import reverse
|
|
from django.contrib.auth.decorators \
|
|
import login_required, permission_required, user_passes_test
|
|
from django.contrib.auth.models import User, Group
|
|
from django.contrib import messages
|
|
from django.db import transaction, IntegrityError
|
|
|
|
from modoboa import admin, userprefs
|
|
from models import *
|
|
from admin.permissions import *
|
|
from modoboa.lib.authbackends import crypt_password
|
|
from modoboa.lib import _render, _render_to_string, _ctx_ok, \
|
|
getctx, events, parameters
|
|
from modoboa.lib.models import Parameter
|
|
import copy
|
|
import pwd
|
|
|
|
def good_domain(f):
|
|
def dec(request, dom_id, **kwargs):
|
|
if request.user.is_superuser:
|
|
return f(request, dom_id, **kwargs)
|
|
mb = Mailbox.objects.get(user=request.user.id)
|
|
if isinstance(dom_id, str) or isinstance(dom_id, unicode):
|
|
dom_id = int(dom_id)
|
|
if dom_id == mb.domain.id:
|
|
return f(request, dom_id, **kwargs)
|
|
|
|
from django.conf import settings
|
|
path = urlquote(request.get_full_path())
|
|
login_url = settings.LOGIN_URL
|
|
return HttpResponseRedirect("%s?next=%s" % (login_url, path))
|
|
return dec
|
|
|
|
@login_required
|
|
def domains(request):
|
|
if not request.user.has_perm("admin.view_domains"):
|
|
if request.user.has_perm("admin.view_mailboxes"):
|
|
mb = Mailbox.objects.get(user=request.user.id)
|
|
return mailboxes(request, dom_id=mb.domain.id)
|
|
|
|
return HttpResponseRedirect(reverse(userprefs.views.preferences))
|
|
|
|
domains = Domain.objects.all()
|
|
counters = {}
|
|
for dom in domains:
|
|
dom.mboxcounter = len(dom.mailbox_set.all())
|
|
return _render(request, 'admin/domains.html', {
|
|
"domains" : domains, "counters" : counters
|
|
})
|
|
|
|
@login_required
|
|
def domaliases(request, dom_id=None):
|
|
domaliases = DomainAlias.objects.all()
|
|
return _render(request, 'admin/domaliases.html', {
|
|
"domaliases" : domaliases
|
|
})
|
|
|
|
@login_required
|
|
def newdomalias(request, dom_id):
|
|
domain = Domain.objects.get(pk=dom_id)
|
|
if request.method == "POST":
|
|
form = DomainAliasForm(request.POST)
|
|
error = None
|
|
if form.is_valid():
|
|
if DomainAlias.objects.filter(name=request.POST["name"]):
|
|
error = _("Alias with this name already exists")
|
|
else:
|
|
domalias = form.save(commit=False)
|
|
domalias.save()
|
|
ctx = _ctx_ok(reverse(admin.views.domaliases))
|
|
messages.info(request, _("Domain alias created"), fail_silently=True)
|
|
return HttpResponse(simplejson.dumps(ctx),
|
|
mimetype="application/json")
|
|
content = _render_to_string(request, "admin/newdomalias.html", {
|
|
"form" : form, "error" : error
|
|
})
|
|
ctx = getctx("ko", content=content)
|
|
return HttpResponse(simplejson.dumps(ctx), mimetype="application/json")
|
|
form = DomainAliasForm()
|
|
return _render(request, 'admin/newdomalias.html', {
|
|
"form" : form
|
|
})
|
|
|
|
@login_required
|
|
@permission_required("admin.add_domain")
|
|
def newdomain(request):
|
|
if request.method == "POST":
|
|
form = DomainForm(request.POST)
|
|
error = None
|
|
if form.is_valid():
|
|
if Domain.objects.filter(name=request.POST["name"]):
|
|
error = _("Domain with this name already defined")
|
|
else:
|
|
domain = form.save(commit=False)
|
|
if domain.create_dir():
|
|
form.save()
|
|
events.raiseEvent("CreateDomain", dom=domain)
|
|
ctx = _ctx_ok(reverse(admin.views.domains))
|
|
messages.info(request, _("Domain created"), fail_silently=True)
|
|
return HttpResponse(simplejson.dumps(ctx),
|
|
mimetype="application/json")
|
|
error = _("Failed to initialise domain, check permissions")
|
|
content = _render_to_string(request, "admin/newdomain.html", {
|
|
"form" : form, "error" : error
|
|
})
|
|
ctx = getctx("ko", content=content)
|
|
return HttpResponse(simplejson.dumps(ctx), mimetype="application/json")
|
|
|
|
form = DomainForm()
|
|
return _render(request, 'admin/newdomain.html', {
|
|
"form" : form
|
|
})
|
|
|
|
@login_required
|
|
@permission_required("admin.change_domain")
|
|
def editdomain(request, dom_id):
|
|
domain = Domain.objects.get(pk=dom_id)
|
|
olddomain = copy.deepcopy(domain)
|
|
if request.method == "POST":
|
|
form = DomainForm(request.POST, instance=domain)
|
|
error = None
|
|
if form.is_valid():
|
|
if domain.name != olddomain.name:
|
|
if Domain.objects.filter(name=domain.name):
|
|
error = _("Domain with this name already defined")
|
|
else:
|
|
if not olddomain.rename_dir(domain.name):
|
|
error = _("Failed to rename domain, check permissions")
|
|
if not error:
|
|
form.save()
|
|
ctx = _ctx_ok(reverse(admin.views.domains))
|
|
messages.info(request, _("Domain modified"), fail_silently=True)
|
|
return HttpResponse(simplejson.dumps(ctx), mimetype="application/json")
|
|
content = _render_to_string(request, "admin/editdomain.html", {
|
|
"domain" : domain, "form" : form, "error" : error
|
|
})
|
|
ctx = getctx("ko", content=content)
|
|
return HttpResponse(simplejson.dumps(ctx), mimetype="application/json")
|
|
|
|
form = DomainForm(instance=domain)
|
|
return _render(request, 'admin/editdomain.html', {
|
|
"domain" : domain, "form" : form
|
|
})
|
|
|
|
@login_required
|
|
@permission_required("admin.delete_domain")
|
|
def deldomain(request, dom_id):
|
|
domain = Domain.objects.get(pk=dom_id)
|
|
events.raiseEvent("DeleteDomain", dom=domain)
|
|
domain.delete_dir()
|
|
domain.delete()
|
|
messages.info(request, _("Domain deleted"), fail_silently=True)
|
|
return HttpResponseRedirect(reverse(admin.views.domains))
|
|
|
|
@login_required
|
|
@good_domain
|
|
@permission_required("admin.view_mailboxes")
|
|
def mailboxes(request, dom_id=None):
|
|
domain = Domain.objects.get(pk=dom_id)
|
|
mailboxes = Mailbox.objects.filter(domain=dom_id)
|
|
return _render(request, 'admin/mailboxes.html', {
|
|
"mailboxes" : mailboxes, "domain" : domain
|
|
})
|
|
|
|
@login_required
|
|
@good_domain
|
|
@permission_required("admin.view_mailboxes")
|
|
def mailboxes_raw(request, dom_id=None):
|
|
mailboxes = Mailbox.objects.filter(domain=dom_id).exclude(user__id=request.user.id)
|
|
return _render(request, 'admin/mailboxes_raw.html', {
|
|
"mailboxes" : mailboxes
|
|
})
|
|
|
|
@login_required
|
|
@good_domain
|
|
@permission_required("admin.add_mailbox")
|
|
def newmailbox(request, dom_id=None):
|
|
domain = Domain.objects.get(pk=dom_id)
|
|
if request.method == "POST":
|
|
form = MailboxForm(request.POST)
|
|
error = None
|
|
if form.is_valid():
|
|
mb = form.save(commit=False)
|
|
if mb.create_dir(domain):
|
|
from django.conf import settings
|
|
|
|
user = User()
|
|
user.username = user.email = "%s@%s" % (mb.address, domain.name)
|
|
user.set_unusable_password()
|
|
user.is_active = request.POST.has_key("enabled") \
|
|
and True or False
|
|
try:
|
|
fname, lname = mb.name.split()
|
|
except ValueError:
|
|
fname = mb.name
|
|
lname = ""
|
|
user.first_name = fname
|
|
user.last_name = lname
|
|
try:
|
|
user.save()
|
|
except IntegrityError:
|
|
error = _("Mailbox with this address already exists")
|
|
else:
|
|
mb.user = user
|
|
mb.password = crypt_password(request.POST["password1"])
|
|
mb.uid = pwd.getpwnam(parameters.get_admin("VIRTUAL_UID")).pw_uid
|
|
mb.gid = pwd.getpwnam(parameters.get_admin("VIRTUAL_GID")).pw_gid
|
|
mb.domain = domain
|
|
mb.quota = request.POST["quota"]
|
|
if not mb.quota:
|
|
mb.quota = domain.quota
|
|
mb.full_address = user.email
|
|
mb.save()
|
|
|
|
events.raiseEvent("CreateMailbox", mbox=mb)
|
|
|
|
messages.info(request, _("Mailbox created."),
|
|
fail_silently=True)
|
|
ctx = _ctx_ok(reverse(admin.views.mailboxes, args=[domain.id]))
|
|
return HttpResponse(simplejson.dumps(ctx),
|
|
mimetype="application/json")
|
|
else:
|
|
error = _("Failed to initialise mailbox, check permissions")
|
|
content = _render_to_string("ko", "admin/newmailbox.html", {
|
|
"form" : form, "domain" : domain, "error" : error
|
|
})
|
|
ctx = getctx("ko", content=content)
|
|
return HttpResponse(simplejson.dumps(ctx), mimetype="application/json")
|
|
|
|
form = MailboxForm()
|
|
return _render(request, "admin/newmailbox.html", {
|
|
"domain" : domain, "form" : form
|
|
})
|
|
|
|
@login_required
|
|
@good_domain
|
|
@permission_required("admin.change_mailbox")
|
|
@transaction.commit_manually
|
|
def editmailbox(request, dom_id, mbox_id=None):
|
|
mb = Mailbox.objects.get(pk=mbox_id)
|
|
if request.method == "POST":
|
|
oldmb = copy.deepcopy(mb)
|
|
form = MailboxForm(request.POST, instance=mb)
|
|
error = None
|
|
if form.is_valid():
|
|
mb = form.save(commit=False)
|
|
mb.user.is_active = request.POST.has_key("enabled") \
|
|
and request.POST["enabled"] or False
|
|
mb.user.username = mb.user.email = \
|
|
"%s@%s" % (mb.address, mb.domain.name)
|
|
try:
|
|
mb.user.save()
|
|
except IntegrityError:
|
|
error = _("Mailbox with this address already exists")
|
|
else:
|
|
if not oldmb.rename_dir(mb.domain.name, mb.address):
|
|
error = _("Failed to rename mailbox, check permissions")
|
|
else:
|
|
if request.POST["password1"] != u"é":
|
|
mb.password = crypt_password(request.POST["password1"])
|
|
mb.quota = request.POST["quota"]
|
|
if not mb.quota:
|
|
mb.quota = mb.domain.quota
|
|
mb.full_address = mb.user.email
|
|
mb.save()
|
|
transaction.commit()
|
|
events.raiseEvent("ModifyMailbox", mbox=mb, oldmbox=oldmb)
|
|
messages.info(request, _("Mailbox modified"),
|
|
fail_silently=True)
|
|
ctx = _ctx_ok(reverse(admin.views.mailboxes, args=[dom_id]))
|
|
return HttpResponse(simplejson.dumps(ctx),
|
|
mimetype="application/json")
|
|
if error is not None:
|
|
transaction.rollback()
|
|
ctx = getctx("ko", content=_render_to_string(request, "admin/editmailbox.html", {
|
|
"mbox" : mb, "form" : form, "error" : error
|
|
}))
|
|
return HttpResponse(simplejson.dumps(ctx), mimetype="application/json")
|
|
|
|
form = MailboxForm(instance=mb)
|
|
form.fields['quota'].initial = mb.quota
|
|
form.fields['enabled'].initial = mb.user.is_active
|
|
form.fields['password1'].initial = "é"
|
|
form.fields['password2'].initial = "é"
|
|
return _render(request, 'admin/editmailbox.html', {
|
|
"form" : form, "mbox" : mb
|
|
})
|
|
|
|
@login_required
|
|
@good_domain
|
|
@permission_required("admin.delete_mailbox")
|
|
def delmailbox(request, dom_id, mbox_id=None):
|
|
mb = Mailbox.objects.get(pk=mbox_id)
|
|
if mb.user.id != request.user.id:
|
|
events.raiseEvent("DeleteMailbox", mbox=mb)
|
|
if not request.GET.has_key("keepdir") or request.GET["keepdir"] != "true":
|
|
mb.delete_dir()
|
|
mb.user.delete()
|
|
mb.delete()
|
|
messages.info(request, _("Mailbox deleted"), fail_silently=True)
|
|
ctx = _ctx_ok("")
|
|
else:
|
|
ctx = getctx("ko", error=_("You can't delete your own mailbox"))
|
|
return HttpResponse(simplejson.dumps(ctx),
|
|
mimetype="application/json")
|
|
|
|
@login_required
|
|
@good_domain
|
|
@permission_required("admin.view_aliases")
|
|
def aliases(request, dom_id=None, mbox_id=None):
|
|
domain = Domain.objects.get(pk=dom_id)
|
|
if not mbox_id:
|
|
aliases = Alias.objects.filter(mboxes__domain__id=dom_id).distinct()
|
|
else:
|
|
aliases = Alias.objects.filter(mboxes__id=mbox_id)
|
|
return _render(request, 'admin/aliases.html', {
|
|
"aliases" : aliases, "domain" : domain
|
|
})
|
|
|
|
@login_required
|
|
@good_domain
|
|
@permission_required("admin.add_alias")
|
|
def newalias(request, dom_id):
|
|
domain = Domain.objects.get(pk=dom_id)
|
|
if request.method == "POST":
|
|
form = AliasForm(request.POST, domain=domain)
|
|
error = None
|
|
if form.is_valid():
|
|
if Alias.objects.filter(address=request.POST["address"]):
|
|
error = _("Alias with this name already exists")
|
|
else:
|
|
alias = form.save(commit=False)
|
|
alias.full_address = "%s@%s" % (alias.address, domain.name)
|
|
alias.save()
|
|
form.save_m2m()
|
|
ctx = _ctx_ok(reverse(admin.views.aliases, args=[dom_id]))
|
|
messages.info(request, _("Alias created"), fail_silently=True)
|
|
return HttpResponse(simplejson.dumps(ctx),
|
|
mimetype="application/json")
|
|
content = _render_to_string(request, "admin/newalias.html", {
|
|
"domain" : dom_id, "form" : form, "error" : error
|
|
})
|
|
ctx = getctx("ko", content=content)
|
|
return HttpResponse(simplejson.dumps(ctx), mimetype="application/json")
|
|
|
|
form = AliasForm(domain=domain)
|
|
return _render(request, 'admin/newalias.html', {
|
|
"domain" : dom_id, "form" : form, "noerrors" : True
|
|
})
|
|
|
|
@login_required
|
|
@good_domain
|
|
@permission_required("admin.change_alias")
|
|
def editalias(request, dom_id, alias_id):
|
|
alias = Alias.objects.get(pk=alias_id)
|
|
if request.method == "POST":
|
|
form = AliasForm(request.POST, instance=alias)
|
|
error = None
|
|
if form.is_valid():
|
|
if alias.address != request.POST["address"] \
|
|
and Alias.objects.filter(address=request.POST["address"]):
|
|
error = _("Alias with this name already exists")
|
|
else:
|
|
domain = Domain.objects.get(pk=dom_id)
|
|
alias = form.save(commit=False)
|
|
alias.full_address = "%s@%s" % (alias.address,
|
|
domain.name)
|
|
alias.save()
|
|
form.save_m2m()
|
|
ctx = _ctx_ok(reverse(admin.views.aliases, args=[dom_id]))
|
|
messages.info(request, _("Alias modified"),
|
|
fail_silently=True)
|
|
return HttpResponse(simplejson.dumps(ctx),
|
|
mimetype="application/json")
|
|
content = _render_to_string(request, "admin/editalias.html", {
|
|
"domain" : dom_id, "alias" : alias, "form" : form, "error" : error
|
|
})
|
|
ctx = getctx("ko", content=content)
|
|
return HttpResponse(simplejson.dumps(ctx), mimetype="application/json")
|
|
form = AliasForm(instance=alias)
|
|
return _render(request, 'admin/editalias.html', {
|
|
"form" : form, "alias" : alias, "domain" : dom_id
|
|
})
|
|
|
|
@login_required
|
|
@good_domain
|
|
@permission_required("admin.delete_alias")
|
|
def delalias(request, dom_id, alias_id):
|
|
alias = Alias.objects.get(pk=alias_id)
|
|
alias.delete()
|
|
messages.info(request, _("Alias deleted"), fail_silently=True)
|
|
return HttpResponseRedirect(reverse(admin.views.aliases,
|
|
args=[dom_id]))
|
|
|
|
@login_required
|
|
@permission_required("auth.view_permissions")
|
|
def permissions(request):
|
|
permtables = []
|
|
if request.user.is_superuser:
|
|
permtables += [
|
|
{"id" : "super_admins",
|
|
"title" : _("Super administrators"),
|
|
"content" : SuperAdminsPerms().get(request)}
|
|
]
|
|
|
|
permtables += events.raiseQueryEvent("PermsGetTables", user=request.user)
|
|
|
|
permtables += [
|
|
{"id" : "domain_admins",
|
|
"title" : _("Domain administrators"),
|
|
"content" : DomainAdminsPerms().get(request)}
|
|
]
|
|
|
|
return _render(request, 'admin/permissions.html', {
|
|
"permtables" : permtables
|
|
})
|
|
|
|
@login_required
|
|
@permission_required("auth.view_permissions")
|
|
def add_permission(request):
|
|
role = request.method == "GET" and request.GET["role"] or request.POST["role"]
|
|
pclass = get_perms_class(request.user, role)
|
|
if pclass is None:
|
|
messages.error(request, _("Permission denied!"),
|
|
fail_silently=True)
|
|
else:
|
|
pobj = pclass()
|
|
if request.method == "GET":
|
|
return pobj.get_add_form(request)
|
|
status, data = pobj.add(request)
|
|
if not status:
|
|
return HttpResponse(simplejson.dumps(data), mimetype="application/json")
|
|
messages.info(request, _("Permission added."),
|
|
fail_silently=True)
|
|
ctx = _ctx_ok(reverse(admin.views.permissions))
|
|
return HttpResponse(simplejson.dumps(ctx),
|
|
mimetype="application/json")
|
|
|
|
@login_required
|
|
def delete_permissions(request):
|
|
pclass = get_perms_class(request.user, request.GET["role"])
|
|
if pclass is None:
|
|
ctx = getctx("ko", message=_("Permission denied!"))
|
|
else:
|
|
selection = request.GET["selection"].split(",")
|
|
pobj = pclass()
|
|
pobj.delete(selection)
|
|
ctx = getctx("ok", content=pobj.get(request),
|
|
message=_("Permissions removed"))
|
|
return HttpResponse(simplejson.dumps(ctx), mimetype="application/json")
|
|
|
|
@login_required
|
|
@user_passes_test(lambda u: u.is_superuser)
|
|
def viewparameters(request):
|
|
apps = sorted(parameters._params.keys())
|
|
gparams = []
|
|
for app in apps:
|
|
tmp = {"name" : app, "params" : []}
|
|
for p in sorted(parameters._params[app]['A']):
|
|
param_def = parameters._params[app]['A'][p]
|
|
newdef = {"name" : p,
|
|
"value" : parameters.get_admin(p, app=app),
|
|
"help" : param_def["help"],
|
|
"default" : param_def["deflt"],
|
|
"type" : param_def["type"]}
|
|
if "values" in param_def.keys():
|
|
newdef["values"] = param_def["values"]
|
|
tmp["params"] += [newdef]
|
|
gparams += [tmp]
|
|
|
|
return _render(request, 'admin/parameters.html', {
|
|
"gparams" : gparams
|
|
})
|
|
|
|
@login_required
|
|
@user_passes_test(lambda u: u.is_superuser)
|
|
def saveparameters(request):
|
|
for pname, v in request.POST.iteritems():
|
|
if pname == "update":
|
|
continue
|
|
app, name = pname.split('.')
|
|
parameters.save_admin(name, v, app=app)
|
|
ctx = getctx("ok")
|
|
return HttpResponse(simplejson.dumps(ctx), mimetype="application/json")
|
|
|
|
@login_required
|
|
@user_passes_test(lambda u: u.is_superuser)
|
|
def viewextensions(request):
|
|
from extensions import list_extensions
|
|
from lib import tables
|
|
|
|
class ExtensionsTable(tables.Table):
|
|
idkey = "id"
|
|
selection = tables.SelectionColumn("selection", width="4%", first=True)
|
|
_1_name = tables.Column("name", label=_("Name"), width="15%")
|
|
_2_version = tables.Column("version", label=_("Version"), width="6%")
|
|
_3_descr = tables.Column("description", label=_("Description"))
|
|
|
|
exts = list_extensions()
|
|
for ext in exts:
|
|
try:
|
|
dbext = Extension.objects.get(name=ext["id"])
|
|
ext["selection"] = dbext.enabled
|
|
except Extension.DoesNotExist:
|
|
dbext = Extension()
|
|
dbext.name = ext["id"]
|
|
dbext.enabled = False
|
|
dbext.save()
|
|
ext["selection"] = False
|
|
|
|
tbl = ExtensionsTable(exts)
|
|
return _render(request, 'admin/extensions.html', {
|
|
"extensions" : tbl.render(request)
|
|
})
|
|
|
|
@login_required
|
|
@user_passes_test(lambda u: u.is_superuser)
|
|
def saveextensions(request):
|
|
import extensions
|
|
|
|
actived_exts = Extension.objects.filter(enabled=True)
|
|
found = []
|
|
for k, v in request.POST.iteritems():
|
|
if k.startswith("select_"):
|
|
parts = k.split("_", 1)
|
|
dbext = Extension.objects.get(name=parts[1])
|
|
if not dbext in actived_exts:
|
|
dbext.on()
|
|
dbext.enabled = True
|
|
dbext.save()
|
|
else:
|
|
found += [dbext]
|
|
for ext in actived_exts:
|
|
if not ext in found:
|
|
ext.off()
|
|
ext.enabled = False
|
|
ext.save()
|
|
messages.info(request, _("Modifications applied."), fail_silently=True)
|
|
return HttpResponseRedirect(reverse(admin.views.viewextensions))
|