annotate gpp/bio/views.py @ 207:8bbefaa3e408

Fix #79; user should get security pin when reporting profiles.
author Brian Neal <bgneal@gmail.com>
date Mon, 03 May 2010 02:59:48 +0000
parents b4305e18d3af
children 7ddd60164245
rev   line source
gremmie@1 1 """
gremmie@1 2 Views for the bio application.
gremmie@1 3 """
gremmie@1 4
gremmie@1 5 from django.shortcuts import render_to_response
gremmie@1 6 from django.shortcuts import get_object_or_404
gremmie@1 7 from django.template import RequestContext
gremmie@1 8 from django.contrib import auth
bgneal@178 9 from django.contrib import messages
bgneal@138 10 from django.http import HttpResponse
bgneal@138 11 from django.http import HttpResponseBadRequest
gremmie@1 12 from django.http import HttpResponseRedirect
bgneal@92 13 from django.core.paginator import InvalidPage
gremmie@1 14 from django.core.urlresolvers import reverse
gremmie@1 15 from django.contrib.auth.decorators import login_required
bgneal@138 16 from django.views.decorators.http import require_POST
gremmie@1 17
bgneal@29 18 from elsewhere.models import SocialNetworkForm
bgneal@29 19 from elsewhere.models import InstantMessengerForm
bgneal@29 20 from elsewhere.models import WebsiteForm
bgneal@29 21
gremmie@1 22 from bio.models import UserProfile
bgneal@138 23 from bio.models import UserProfileFlag
bgneal@204 24 from bio.models import BadgeOwnership
gremmie@1 25 from bio.forms import UploadAvatarForm
gremmie@1 26 from bio.forms import EditUserForm
gremmie@1 27 from bio.forms import EditUserProfileForm
bgneal@149 28 from bio.forms import SearchUsersForm
gremmie@1 29 from core.paginator import DiggPaginator
bgneal@138 30 from core.functions import email_admins
gremmie@1 31
gremmie@1 32 #######################################################################
gremmie@1 33
bgneal@125 34 @login_required
gremmie@1 35 def member_list(request, type='user', page=1):
bgneal@147 36 """
bgneal@147 37 This view displays the member list. Only active members are displayed.
bgneal@147 38 """
bgneal@147 39 qs = auth.models.User.objects.filter(is_active=True)
gremmie@1 40 if type == 'user':
bgneal@147 41 qs = qs.order_by('username')
gremmie@1 42 else:
bgneal@147 43 qs = qs.order_by('date_joined')
bgneal@147 44 num_members = qs.count()
gremmie@1 45
bgneal@147 46 paginator = DiggPaginator(qs, 20, body=5, tail=3, margin=3, padding=2)
gremmie@1 47 try:
gremmie@1 48 the_page = paginator.page(int(page))
gremmie@1 49 except InvalidPage:
gremmie@1 50 raise Http404
gremmie@1 51
bgneal@118 52 # Attach user profiles to each post to avoid using get_user_profile() in
bgneal@118 53 # the template.
bgneal@118 54 users = set(user.id for user in the_page.object_list)
bgneal@118 55
bgneal@118 56 profiles = UserProfile.objects.filter(user__id__in=users).select_related()
bgneal@118 57 user_profiles = dict((profile.user.id, profile) for profile in profiles)
bgneal@118 58
bgneal@118 59 for user in the_page.object_list:
bgneal@118 60 user.user_profile = user_profiles[user.id]
bgneal@118 61
gremmie@1 62 return render_to_response('bio/members.html', {
gremmie@1 63 'page': the_page,
gremmie@1 64 'type': type,
bgneal@147 65 'num_members': num_members,
gremmie@1 66 },
gremmie@1 67 context_instance = RequestContext(request))
gremmie@1 68
gremmie@1 69 #######################################################################
gremmie@1 70
gremmie@1 71 @login_required
gremmie@1 72 def my_profile(request):
bgneal@44 73 profile = request.user.get_profile()
bgneal@204 74 badge_collection = BadgeOwnership.objects.filter(
bgneal@204 75 profile=profile).select_related("badge")
gremmie@1 76
gremmie@1 77 return render_to_response('bio/view_profile.html', {
gremmie@1 78 'subject': request.user,
gremmie@1 79 'profile': profile,
gremmie@1 80 'hide_email': False,
gremmie@1 81 'this_is_me': True,
bgneal@204 82 'badge_collection': badge_collection,
gremmie@1 83 },
gremmie@1 84 context_instance = RequestContext(request))
gremmie@1 85
gremmie@1 86 #######################################################################
gremmie@1 87
gremmie@1 88 @login_required
gremmie@1 89 def view_profile(request, username):
gremmie@1 90
gremmie@1 91 user = get_object_or_404(auth.models.User, username = username)
gremmie@1 92 if user == request.user:
gremmie@1 93 return HttpResponseRedirect(reverse('bio.views.my_profile'))
gremmie@1 94
bgneal@44 95 profile = user.get_profile()
bgneal@204 96 hide_email = profile.hide_email
gremmie@1 97
bgneal@204 98 badge_collection = BadgeOwnership.objects.filter(
bgneal@204 99 profile=profile).select_related("badge")
gremmie@1 100
gremmie@1 101 return render_to_response('bio/view_profile.html', {
gremmie@1 102 'subject': user,
gremmie@1 103 'profile': profile,
gremmie@1 104 'hide_email': hide_email,
gremmie@1 105 'this_is_me': False,
bgneal@204 106 'badge_collection': badge_collection,
gremmie@1 107 },
gremmie@1 108 context_instance = RequestContext(request))
gremmie@1 109
gremmie@1 110 #######################################################################
gremmie@1 111
gremmie@1 112 @login_required
gremmie@1 113 def edit_profile(request):
gremmie@1 114 if request.method == 'POST':
gremmie@1 115 if request.POST.get('submit_button', 'Cancel') == 'Cancel':
gremmie@1 116 return HttpResponseRedirect(reverse('bio.views.my_profile'))
bgneal@44 117 profile = request.user.get_profile()
gremmie@1 118 user_form = EditUserForm(request.POST, instance=request.user)
gremmie@1 119 profile_form = EditUserProfileForm(request.POST, instance=profile)
gremmie@1 120 if user_form.is_valid() and profile_form.is_valid():
gremmie@1 121 user_form.save()
gremmie@1 122 profile = profile_form.save(commit=False)
gremmie@1 123 profile.user = request.user
gremmie@1 124 profile.save()
gremmie@1 125 return HttpResponseRedirect(reverse('bio.views.my_profile'))
gremmie@1 126 else:
bgneal@44 127 profile = request.user.get_profile()
gremmie@1 128 user_form = EditUserForm(instance=request.user)
gremmie@1 129 profile_form = EditUserProfileForm(instance=profile)
gremmie@1 130
gremmie@1 131 return render_to_response('bio/edit_profile.html', {
gremmie@1 132 'user_form': user_form,
gremmie@1 133 'profile_form': profile_form,
gremmie@1 134 },
gremmie@1 135 context_instance = RequestContext(request))
gremmie@1 136
gremmie@1 137 #######################################################################
gremmie@1 138
gremmie@1 139 @login_required
gremmie@1 140 def change_avatar(request):
gremmie@1 141 if request.method == 'POST':
gremmie@1 142 form = UploadAvatarForm(request.POST, request.FILES)
gremmie@1 143 if form.is_valid():
bgneal@44 144 profile = request.user.get_profile()
gremmie@1 145 file = form.get_file()
gremmie@1 146 if profile.avatar.name != '':
gremmie@1 147 profile.avatar.delete(save=False)
gremmie@1 148 if file is not None:
gremmie@1 149 profile.avatar.save(form.get_filename(), file, save=False)
gremmie@1 150 profile.save()
gremmie@1 151
bgneal@178 152 messages.success(request, 'Avatar updated')
gremmie@1 153 return HttpResponseRedirect(reverse('bio-me'))
gremmie@1 154 else:
gremmie@1 155 form = UploadAvatarForm()
gremmie@1 156
gremmie@1 157 return render_to_response('bio/avatar.html', {
gremmie@1 158 'form': form,
gremmie@1 159 },
gremmie@1 160 context_instance = RequestContext(request))
gremmie@1 161
bgneal@29 162 #######################################################################
gremmie@1 163
bgneal@138 164 @require_POST
bgneal@138 165 def flag_profile(request, profile_id):
bgneal@138 166 """
bgneal@138 167 This function handles the flagging of profiles by users. This function should
bgneal@138 168 be the target of an AJAX post.
bgneal@138 169 """
bgneal@138 170 if not request.user.is_authenticated():
bgneal@138 171 return HttpResponse('Please login or register to flag a profile.')
bgneal@138 172
bgneal@138 173 try:
bgneal@138 174 profile = UserProfile.objects.get(pk=profile_id)
bgneal@138 175 except UserProfile.DoesNotExist:
bgneal@138 176 return HttpResponseBadRequest("That profile doesn't exist.")
bgneal@138 177
bgneal@138 178 flag = UserProfileFlag(user=request.user, profile=profile)
bgneal@138 179 flag.save()
bgneal@138 180 email_admins('A Profile Has Been Flagged', """Hello,
bgneal@138 181
bgneal@138 182 A user has flagged a profile for review.
bgneal@138 183 """)
bgneal@138 184 return HttpResponse('The profile was flagged. A moderator will review the' \
bgneal@138 185 ' profile shortly. Thanks for helping to improve the content on this ' \
bgneal@138 186 'site.')
bgneal@138 187
bgneal@138 188 #######################################################################
bgneal@138 189
bgneal@29 190 @login_required
bgneal@29 191 def edit_elsewhere(request):
bgneal@29 192 im_id = 'id_im_%s' # to prevent duplicate ID in HTML output
bgneal@29 193 if request.method == 'POST':
bgneal@29 194 new_data = request.POST.copy()
bgneal@29 195
bgneal@29 196 # Add forms
bgneal@29 197 if new_data.get('sn-form') or new_data.get('im-form') or new_data.get('w-form'):
bgneal@29 198
bgneal@29 199 if new_data.get('sn-form'):
bgneal@29 200 sn_form = SocialNetworkForm(new_data)
bgneal@29 201 im_form = InstantMessengerForm(auto_id=im_id)
bgneal@29 202 w_form = WebsiteForm()
bgneal@29 203 form = sn_form
bgneal@29 204 elif new_data.get('im-form'):
bgneal@29 205 sn_form = SocialNetworkForm()
bgneal@29 206 im_form = InstantMessengerForm(new_data, auto_id=im_id)
bgneal@29 207 w_form = WebsiteForm()
bgneal@29 208 form = im_form
bgneal@29 209 elif new_data.get('w-form'):
bgneal@29 210 sn_form = SocialNetworkForm()
bgneal@29 211 im_form = InstantMessengerForm(auto_id=im_id)
bgneal@29 212 w_form = WebsiteForm(new_data)
bgneal@29 213 form = w_form
bgneal@29 214
bgneal@29 215 if form.is_valid():
bgneal@29 216 profile = form.save(commit=False)
bgneal@29 217 profile.user = request.user
bgneal@29 218 profile.save()
bgneal@29 219 return HttpResponseRedirect(request.path)
bgneal@29 220
bgneal@29 221 # Delete forms
bgneal@29 222 elif new_data.get('delete-sn-form') or new_data.get('delete-im-form') or new_data.get('delete-w-form'):
bgneal@29 223 delete_id = request.POST['delete_id']
bgneal@29 224
bgneal@29 225 if new_data.get('delete-sn-form'):
bgneal@29 226 request.user.social_network_profiles.get(id=delete_id).delete()
bgneal@29 227 elif new_data.get('delete-im-form'):
bgneal@29 228 request.user.instant_messenger_profiles.get(id=delete_id).delete()
bgneal@29 229 elif new_data.get('delete-w-form'):
bgneal@29 230 request.user.website_profiles.get(id=delete_id).delete()
bgneal@29 231
bgneal@29 232 return HttpResponseRedirect(request.path)
bgneal@29 233
bgneal@29 234 # WTF?
bgneal@29 235 else:
bgneal@29 236 return HttpResponseServerError
bgneal@29 237
bgneal@29 238 else:
bgneal@29 239 # Create blank forms
bgneal@29 240 sn_form = SocialNetworkForm()
bgneal@29 241 im_form = InstantMessengerForm(auto_id=im_id)
bgneal@29 242 w_form = WebsiteForm()
bgneal@29 243
bgneal@29 244 return render_to_response('bio/edit_elsewhere.html', {
bgneal@29 245 'sn_form': sn_form,
bgneal@29 246 'im_form': im_form,
bgneal@29 247 'w_form': w_form,
bgneal@29 248 },
bgneal@29 249 context_instance=RequestContext(request))
bgneal@29 250
bgneal@149 251 #######################################################################
bgneal@149 252
bgneal@149 253 @login_required
bgneal@149 254 def member_search(request):
bgneal@149 255 if request.method == "POST":
bgneal@149 256 form = SearchUsersForm(request.POST)
bgneal@149 257 if form.is_valid():
bgneal@149 258 username = form.cleaned_data['username']
bgneal@149 259 return HttpResponseRedirect(reverse("bio-view_profile",
bgneal@149 260 kwargs={'username': username}))
bgneal@149 261 else:
bgneal@149 262 form = SearchUsersForm()
bgneal@149 263
bgneal@149 264 return render_to_response('bio/member_search.html', {
bgneal@149 265 'form': form,
bgneal@149 266 },
bgneal@149 267 context_instance=RequestContext(request))
bgneal@149 268