src/documents/views.py

   1 # This file is part of FNP-Redakcja, licensed under GNU Affero GPLv3 or later.
   2 # Copyright © Fundacja Nowoczesna Polska. See NOTICE for more information.
   3 #
   4 from collections import defaultdict
   5 from datetime import datetime, date, timedelta
   6 import logging
   7 import os
   8 from urllib.parse import quote_plus, unquote, urlsplit, urlunsplit
   9
  10 from django.conf import settings
  11 from django.contrib import auth
  12 from django.contrib.auth.models import User
  13 from django.contrib.auth.decorators import login_required, permission_required
  14 from django.urls import reverse
  15 from django.db.models import Count, Q
  16 from django.db import transaction
  17 from django import http
  18 from django.http import Http404, HttpResponse, HttpResponseForbidden
  19 from django.http.response import HttpResponseRedirect
  20 from django.shortcuts import get_object_or_404, render
  21 from django.utils.encoding import iri_to_uri
  22 from django.utils.translation import gettext_lazy as _
  23 from django.views.decorators.http import require_POST
  24 from django_cas_ng.decorators import user_passes_test
  25
  26 from apiclient import NotAuthorizedError
  27 from . import forms
  28 from . import helpers
  29 from .helpers import active_tab
  30 from .models import (Book, Chunk, Image, BookPublishRecord,
  31         ChunkPublishRecord, ImagePublishRecord, Project)
  32 from fileupload.views import UploadView
  33
  34 #
  35 # Quick hack around caching problems, TODO: use ETags
  36 #
  37 from django.views.decorators.cache import never_cache
  38
  39 logger = logging.getLogger("fnp.documents")
  40
  41
  42 @active_tab('all')
  43 @never_cache
  44 def document_list(request):
  45     return render(request, 'documents/document_list.html')
  46
  47
  48 @active_tab('images')
  49 @never_cache
  50 def image_list(request, user=None):
  51     return render(request, 'documents/image_list.html')
  52
  53
  54 @never_cache
  55 def user(request, username):
  56     user = get_object_or_404(User, username=username)
  57     return render(request, 'documents/user_page.html', {"viewed_user": user})
  58
  59
  60 @login_required
  61 @active_tab('my')
  62 @never_cache
  63 def my(request):
  64     last_books = sorted(request.session.get("wiki_last_books", {}).items(),
  65         key=lambda x: x[1]['time'], reverse=True)
  66     for k, v in last_books:
  67         v['time'] = datetime.fromtimestamp(v['time'])
  68     return render(request, 'documents/my_page.html', {
  69         'last_books': last_books,
  70         "logout_to": '/',
  71         })
  72
  73
  74 @active_tab('users')
  75 def users(request):
  76     return render(request, 'documents/user_list.html', {
  77         'users': User.objects.all().annotate(count=Count('chunk')).order_by(
  78             '-count', 'last_name', 'first_name'),
  79     })
  80
  81
  82 @active_tab('activity')
  83 def activity(request, isodate=None):
  84     today = date.today()
  85     try:
  86         day = helpers.parse_isodate(isodate)
  87     except ValueError:
  88         day = today
  89
  90     if day > today:
  91         raise Http404
  92     if day != today:
  93         next_day = day + timedelta(1)
  94     prev_day = day - timedelta(1)
  95
  96     return render(request, 'documents/activity.html', locals())
  97
  98
  99 @never_cache
 100 def logout_then_redirect(request):
 101     auth.logout(request)
 102     return http.HttpResponseRedirect(quote_plus(request.GET.get('next', '/'), safe='/?='))
 103
 104
 105 @permission_required('documents.add_book')
 106 @active_tab('create')
 107 def create_missing(request, slug=None):
 108     if slug is None:
 109         slug = ''
 110     slug = slug.replace(' ', '-')
 111
 112     if request.method == "POST":
 113         form = forms.DocumentCreateForm(request.POST, request.FILES)
 114         if form.is_valid():
 115
 116             if request.user.is_authenticated:
 117                 creator = request.user
 118             else:
 119                 creator = None
 120             book = Book.create(
 121                 text=form.cleaned_data['text'],
 122                 creator=creator,
 123                 slug=form.cleaned_data['slug'],
 124                 title=form.cleaned_data['title'],
 125                 gallery=form.cleaned_data['gallery'],
 126             )
 127
 128             return http.HttpResponseRedirect(reverse("documents_book", args=[book.slug]))
 129     else:
 130         form = forms.DocumentCreateForm(initial={
 131                 "slug": slug,
 132                 "title": slug.replace('-', ' ').title(),
 133                 "gallery": slug,
 134         })
 135
 136     return render(request, "documents/document_create_missing.html", {
 137         "slug": slug,
 138         "form": form,
 139
 140         "logout_to": '/',
 141     })
 142
 143
 144 @permission_required('documents.add_book')
 145 @active_tab('upload')
 146 def upload(request):
 147     if request.method == "POST":
 148         form = forms.DocumentsUploadForm(request.POST, request.FILES)
 149         if form.is_valid():
 150             from slugify import slugify
 151
 152             if request.user.is_authenticated:
 153                 creator = request.user
 154             else:
 155                 creator = None
 156
 157             zip = form.cleaned_data['zip']
 158             skipped_list = []
 159             ok_list = []
 160             error_list = []
 161             slugs = {}
 162             existing = [book.slug for book in Book.objects.all()]
 163             for filename in zip.namelist():
 164                 if filename[-1] == '/':
 165                     continue
 166                 title = os.path.basename(filename)[:-4]
 167                 slug = slugify(title)
 168                 if not (slug and filename.endswith('.xml')):
 169                     skipped_list.append(filename)
 170                 elif slug in slugs:
 171                     error_list.append((filename, slug, _('Slug already used for %s' % slugs[slug])))
 172                 elif slug in existing:
 173                     error_list.append((filename, slug, _('Slug already used in repository.')))
 174                 else:
 175                     try:
 176                         zip.read(filename).decode('utf-8') # test read
 177                         ok_list.append((filename, slug, title))
 178                     except UnicodeDecodeError:
 179                         error_list.append((filename, title, _('File should be UTF-8 encoded.')))
 180                     slugs[slug] = filename
 181
 182             if not error_list:
 183                 for filename, slug, title in ok_list:
 184                     book = Book.create(
 185                         text=zip.read(filename).decode('utf-8'),
 186                         creator=creator,
 187                         slug=slug,
 188                         title=title,
 189                     )
 190
 191             return render(request, "documents/document_upload.html", {
 192                 "form": form,
 193                 "ok_list": ok_list,
 194                 "skipped_list": skipped_list,
 195                 "error_list": error_list,
 196
 197                 "logout_to": '/',
 198             })
 199     else:
 200         form = forms.DocumentsUploadForm()
 201
 202     return render(request, "documents/document_upload.html", {
 203         "form": form,
 204
 205         "logout_to": '/',
 206     })
 207
 208
 209 def serve_xml(request, book, slug):
 210     if not book.accessible(request):
 211         return HttpResponseForbidden("Not authorized.")
 212     xml = book.materialize(publishable=True)
 213     response = http.HttpResponse(xml, content_type='application/xml')
 214     response['Content-Disposition'] = 'attachment; filename=%s.xml' % slug
 215     return response
 216
 217
 218 @never_cache
 219 def book_xml(request, slug):
 220     book = get_object_or_404(Book, slug=slug)
 221     return serve_xml(request, book, slug)
 222
 223
 224 @never_cache
 225 def book_xml_dc(request, slug):
 226     book = get_object_or_404(Book, catalogue_book_id=slug)
 227     return serve_xml(request, book, slug)
 228
 229
 230 @never_cache
 231 def book_txt(request, slug):
 232     book = get_object_or_404(Book, slug=slug)
 233     if not book.accessible(request):
 234         return HttpResponseForbidden("Not authorized.")
 235
 236     doc = book.wldocument()
 237     text = doc.as_text().get_bytes()
 238     response = http.HttpResponse(text, content_type='text/plain')
 239     response['Content-Disposition'] = 'attachment; filename=%s.txt' % slug
 240     return response
 241
 242
 243 @never_cache
 244 def book_html(request, slug):
 245     book = get_object_or_404(Book, slug=slug)
 246     if not book.accessible(request):
 247         return HttpResponseForbidden("Not authorized.")
 248
 249     doc = book.wldocument(parse_dublincore=False)
 250     html = doc.as_html(options={'gallery': "'%s'" % book.gallery_url()})
 251
 252     html = html.get_bytes().decode('utf-8') if html is not None else ''
 253     # response = http.HttpResponse(html, content_type='text/html')
 254     # return response
 255     # book_themes = {}
 256     # for fragment in book.fragments.all().iterator():
 257     #     for theme in fragment.tags.filter(category='theme').iterator():
 258     #         book_themes.setdefault(theme, []).append(fragment)
 259
 260     # book_themes = book_themes.items()
 261     # book_themes.sort(key=lambda s: s[0].sort_key)
 262     return render(request, 'documents/book_text.html', locals())
 263
 264
 265 @never_cache
 266 def book_pdf(request, slug, mobile=False):
 267     book = get_object_or_404(Book, slug=slug)
 268     if not book.accessible(request):
 269         return HttpResponseForbidden("Not authorized.")
 270
 271     # TODO: move to celery
 272     doc = book.wldocument()
 273     # TODO: error handling
 274     customizations = ['26pt', 'nothemes', 'nomargins', 'notoc'] if mobile else None
 275     pdf_file = doc.as_pdf(cover=True, base_url=request.build_absolute_uri(book.gallery_path()), customizations=customizations)
 276     from .ebook_utils import serve_file
 277     return serve_file(pdf_file.get_filename(),
 278                 book.slug + '.pdf', 'application/pdf')
 279
 280
 281 @never_cache
 282 def book_epub(request, slug):
 283     book = get_object_or_404(Book, slug=slug)
 284     if not book.accessible(request):
 285         return HttpResponseForbidden("Not authorized.")
 286
 287     # TODO: move to celery
 288     doc = book.wldocument()
 289     # TODO: error handling
 290
 291     #### Problemas: images in children.
 292     epub = doc.as_epub(base_url='file://' + book.gallery_path() + '/').get_bytes()
 293     response = HttpResponse(content_type='application/epub+zip')
 294     response['Content-Disposition'] = 'attachment; filename=%s' % book.slug + '.epub'
 295     response.write(epub)
 296     return response
 297
 298
 299 @never_cache
 300 def book_mobi(request, slug):
 301     book = get_object_or_404(Book, slug=slug)
 302     if not book.accessible(request):
 303         return HttpResponseForbidden("Not authorized.")
 304
 305     # TODO: move to celery
 306     doc = book.wldocument()
 307     # TODO: error handling
 308     mobi = doc.as_mobi(base_url='file://' + book.gallery_path() + '/').get_bytes()
 309     response = HttpResponse(content_type='application/x-mobipocket-ebook')
 310     response['Content-Disposition'] = 'attachment; filename=%s' % book.slug + '.mobi'
 311     response.write(mobi)
 312     return response
 313
 314
 315 @never_cache
 316 def revision(request, slug, chunk=None):
 317     try:
 318         doc = Chunk.get(slug, chunk)
 319     except (Chunk.MultipleObjectsReturned, Chunk.DoesNotExist):
 320         raise Http404
 321     if not doc.book.accessible(request):
 322         return HttpResponseForbidden("Not authorized.")
 323     return http.HttpResponse(str(doc.revision()))
 324
 325
 326 def book(request, slug):
 327     book = get_object_or_404(Book, slug=slug)
 328     if not book.accessible(request):
 329         return HttpResponseForbidden("Not authorized.")
 330
 331     if request.user.has_perm('documents.change_book'):
 332         if request.method == "POST":
 333             form = forms.BookForm(request.POST, instance=book)
 334             if form.is_valid():
 335                 form.save()
 336                 return http.HttpResponseRedirect(book.get_absolute_url())
 337         else:
 338             form = forms.BookForm(instance=book)
 339         publish_options_form = forms.PublishOptionsForm()
 340         editable = True
 341     else:
 342         form = forms.ReadonlyBookForm(instance=book)
 343         publish_options_form = forms.PublishOptionsForm()
 344         editable = False
 345
 346     publish_error = book.publishable_error()
 347     publishable = publish_error is None
 348
 349     try:
 350         doc = book.wldocument()
 351     except:
 352         doc = None
 353
 354     return render(request, "documents/book_detail.html", {
 355         "book": book,
 356         "doc": doc,
 357         "publishable": publishable,
 358         "publishable_error": publish_error,
 359         "form": form,
 360         "publish_options_form": publish_options_form,
 361         "editable": editable,
 362     })
 363
 364
 365 def image(request, slug):
 366     image = get_object_or_404(Image, slug=slug)
 367     if not image.accessible(request):
 368         return HttpResponseForbidden("Not authorized.")
 369
 370     if request.user.has_perm('documents.change_image'):
 371         if request.method == "POST":
 372             form = forms.ImageForm(request.POST, instance=image)
 373             if form.is_valid():
 374                 form.save()
 375                 return http.HttpResponseRedirect(image.get_absolute_url())
 376         else:
 377             form = forms.ImageForm(instance=image)
 378         editable = True
 379     else:
 380         form = forms.ReadonlyImageForm(instance=image)
 381         editable = False
 382
 383     publish_error = image.publishable_error()
 384     publishable = publish_error is None
 385
 386     return render(request, "documents/image_detail.html", {
 387         "object": image,
 388         "publishable": publishable,
 389         "publishable_error": publish_error,
 390         "form": form,
 391         "editable": editable,
 392     })
 393
 394
 395 @permission_required('documents.add_chunk')
 396 def chunk_add(request, slug, chunk):
 397     try:
 398         doc = Chunk.get(slug, chunk)
 399     except (Chunk.MultipleObjectsReturned, Chunk.DoesNotExist):
 400         raise Http404
 401     if not doc.book.accessible(request):
 402         return HttpResponseForbidden("Not authorized.")
 403
 404     if request.method == "POST":
 405         form = forms.ChunkAddForm(request.POST, instance=doc)
 406         if form.is_valid():
 407             if request.user.is_authenticated:
 408                 creator = request.user
 409             else:
 410                 creator = None
 411             doc.split(creator=creator,
 412                 slug=form.cleaned_data['slug'],
 413                 title=form.cleaned_data['title'],
 414                 gallery_start=form.cleaned_data['gallery_start'],
 415                 user=form.cleaned_data['user'],
 416                 stage=form.cleaned_data['stage']
 417             )
 418
 419             return http.HttpResponseRedirect(doc.book.get_absolute_url())
 420     else:
 421         form = forms.ChunkAddForm(initial={
 422                 "slug": str(doc.number + 1),
 423                 "title": "cz. %d" % (doc.number + 1, ),
 424         })
 425
 426     return render(request, "documents/chunk_add.html", {
 427         "chunk": doc,
 428         "form": form,
 429     })
 430
 431
 432 @login_required
 433 def chunk_edit(request, slug, chunk):
 434     try:
 435         doc = Chunk.get(slug, chunk)
 436     except (Chunk.MultipleObjectsReturned, Chunk.DoesNotExist):
 437         raise Http404
 438     if not doc.book.accessible(request):
 439         return HttpResponseForbidden("Not authorized.")
 440
 441     if request.method == "POST":
 442         form = forms.ChunkForm(request.POST, instance=doc)
 443         if form.is_valid():
 444             form.save()
 445             go_next = request.GET.get('next', None)
 446             if go_next:
 447                 go_next = quote_plus(unquote(iri_to_uri(go_next)), safe='/?=&')
 448             else:
 449                 go_next = doc.book.get_absolute_url()
 450             return http.HttpResponseRedirect(go_next)
 451     else:
 452         form = forms.ChunkForm(instance=doc)
 453
 454     referer = request.META.get('HTTP_REFERER')
 455     if referer:
 456         parts = urlsplit(referer)
 457         parts = ['', ''] + list(parts[2:])
 458         go_next = quote_plus(urlunsplit(parts))
 459     else:
 460         go_next = ''
 461
 462     return render(request, "documents/chunk_edit.html", {
 463         "chunk": doc,
 464         "form": form,
 465         "go_next": go_next,
 466     })
 467
 468
 469 @transaction.atomic
 470 @login_required
 471 @require_POST
 472 def chunk_mass_edit(request):
 473     ids = [int(i) for i in request.POST.get('ids').split(',') if i.strip()]
 474     chunks = list(Chunk.objects.filter(id__in=ids))
 475
 476     stage = request.POST.get('stage')
 477     if stage:
 478         try:
 479             stage = Chunk.tag_model.objects.get(slug=stage)
 480         except Chunk.DoesNotExist as e:
 481             stage = None
 482
 483         for c in chunks: c.stage = stage
 484
 485     username = request.POST.get('user')
 486     logger.info("username: %s" % username)
 487     logger.info(request.POST)
 488     if username:
 489         try:
 490             user = User.objects.get(username=username)
 491         except User.DoesNotExist as e:
 492             user = None
 493
 494         for c in chunks: c.user = user
 495
 496     project_id = request.POST.get('project')
 497     if project_id:
 498         try:
 499             project = Project.objects.get(pk=int(project_id))
 500         except (Project.DoesNotExist, ValueError) as e:
 501             project = None
 502         for c in chunks:
 503             book = c.book
 504             book.project = project
 505             book.save()
 506
 507     for c in chunks: c.save()
 508
 509     return HttpResponse("", content_type="text/plain")
 510
 511
 512 @transaction.atomic
 513 @login_required
 514 @require_POST
 515 def image_mass_edit(request):
 516     ids = map(int, filter(lambda i: i.strip()!='', request.POST.get('ids').split(',')))
 517     images = map(lambda i: Image.objects.get(id=i), ids)
 518
 519     stage = request.POST.get('stage')
 520     if stage:
 521         try:
 522             stage = Image.tag_model.objects.get(slug=stage)
 523         except Image.DoesNotExist as e:
 524             stage = None
 525
 526         for c in images: c.stage = stage
 527
 528     username = request.POST.get('user')
 529     logger.info("username: %s" % username)
 530     logger.info(request.POST)
 531     if username:
 532         try:
 533             user = User.objects.get(username=username)
 534         except User.DoesNotExist as e:
 535             user = None
 536
 537         for c in images: c.user = user
 538
 539     project_id = request.POST.get('project')
 540     if project_id:
 541         try:
 542             project = Project.objects.get(pk=int(project_id))
 543         except (Project.DoesNotExist, ValueError) as e:
 544             project = None
 545         for c in images:
 546             c.project = project
 547
 548     for c in images: c.save()
 549
 550     return HttpResponse("", content_type="text/plain")
 551
 552
 553 @permission_required('documents.change_book')
 554 def book_append(request, slug):
 555     book = get_object_or_404(Book, slug=slug)
 556     if not book.accessible(request):
 557         return HttpResponseForbidden("Not authorized.")
 558
 559     if request.method == "POST":
 560         form = forms.BookAppendForm(book, request.POST)
 561         if form.is_valid():
 562             append_to = form.cleaned_data['append_to']
 563             append_to.append(book)
 564             return http.HttpResponseRedirect(append_to.get_absolute_url())
 565     else:
 566         form = forms.BookAppendForm(book)
 567     return render(request, "documents/book_append_to.html", {
 568         "book": book,
 569         "form": form,
 570
 571         "logout_to": '/',
 572     })
 573
 574
 575 @require_POST
 576 @login_required
 577 def publish(request, slug):
 578     form = forms.PublishOptionsForm(request.POST)
 579     if form.is_valid():
 580         days = form.cleaned_data['days']
 581         beta = form.cleaned_data['beta']
 582         hidden = form.cleaned_data['hidden']
 583     else:
 584         days = 0
 585         beta = False
 586         hidden = False
 587     book = get_object_or_404(Book, slug=slug)
 588     if not book.accessible(request):
 589         return HttpResponseForbidden("Not authorized.")
 590
 591     try:
 592         protocol = 'https://' if request.is_secure() else 'http://'
 593         book.publish(request.user, host=protocol + request.get_host(), days=days, beta=beta, hidden=hidden)
 594     except NotAuthorizedError:
 595         return http.HttpResponseRedirect(reverse('apiclient_oauth' if not beta else 'apiclient_beta_oauth'))
 596     except BaseException as e:
 597         return http.HttpResponse(repr(e))
 598     else:
 599         return http.HttpResponseRedirect(book.get_absolute_url())
 600
 601
 602 @require_POST
 603 @login_required
 604 def publish_image(request, slug):
 605     image = get_object_or_404(Image, slug=slug)
 606     if not image.accessible(request):
 607         return HttpResponseForbidden("Not authorized.")
 608
 609     try:
 610         image.publish(request.user)
 611     except NotAuthorizedError:
 612         return http.HttpResponseRedirect(reverse('apiclient_oauth'))
 613     except BaseException as e:
 614         return http.HttpResponse(e)
 615     else:
 616         return http.HttpResponseRedirect(image.get_absolute_url())
 617
 618
 619 class GalleryView(UploadView):
 620     def get_object(self, request, slug):
 621         book = get_object_or_404(Book, slug=slug)
 622         if not book.gallery:
 623             raise Http404
 624         return book
 625
 626     def breadcrumbs(self):
 627         return [
 628             (_('books'), reverse('documents_document_list')),
 629             (self.object.title, self.object.get_absolute_url()),
 630             (_('scan gallery'),),
 631         ]
 632
 633     def get_directory(self):
 634         return "%s%s/" % (settings.IMAGE_DIR, self.object.gallery)
 635
 636
 637 def active_users_list(request, csv=False):
 638     year = int(request.GET.get('y', date.today().year))
 639     by_user = defaultdict(lambda: 0)
 640     by_email = defaultdict(lambda: 0)
 641     names_by_email = defaultdict(set)
 642     for change_model in (Chunk.change_model, Image.change_model):
 643         for c in change_model.objects.filter(
 644                 created_at__year=year).order_by(
 645                 'author', 'author_email', 'author_name').values(
 646                 'author', 'author_name', 'author_email').annotate(
 647                 c=Count('author'), ce=Count('author_email')).distinct():
 648             if c['author']:
 649                 by_user[c['author']] += c['c']
 650             else:
 651                 by_email[c['author_email']] += c['ce']
 652                 if (c['author_name'] or '').strip():
 653                     names_by_email[c['author_email']].add(c['author_name'])
 654     for user in User.objects.filter(pk__in=by_user):
 655         by_email[user.email] += by_user[user.pk]
 656         names_by_email[user.email].add("%s %s" % (user.first_name, user.last_name))
 657
 658     active_users = []
 659     for email, count in by_email.items():
 660         active_users.append((email, names_by_email[email], count))
 661     active_users.sort(key=lambda x: -x[2])
 662     if csv:
 663         return http.HttpResponse(
 664             '\n'.join((
 665                 ','.join(
 666                     (str(x[2]), x[0], ','.join(x[1]))
 667                 )
 668                 for x in active_users
 669             )),
 670             content_type='text/csv',
 671             headers={
 672                 'Content-Disposition': f'attachment; filename=redakcja-{year}.csv',
 673             }
 674         )
 675     else:
 676         return render(request, 'documents/active_users_list.html', {
 677             'users': active_users,
 678             'year': year,
 679         })
 680
 681
 682 @user_passes_test(lambda u: u.is_superuser)
 683 def mark_final(request):
 684     if request.method == 'POST':
 685         form = forms.MarkFinalForm(data=request.POST)
 686         if form.is_valid():
 687             form.save()
 688             return HttpResponseRedirect(reverse('mark_final_completed'))
 689     else:
 690         form = forms.MarkFinalForm()
 691     return render(request, 'documents/mark_final.html', {'form': form})
 692
 693
 694 def mark_final_completed(request):
 695     return render(request, 'documents/mark_final_completed.html')