spline/plugins/users/controllers/users.py

   1 import logging
   2 import unicodedata
   3
   4 from wtforms import Form, ValidationError, fields, validators, widgets
   5
   6 from pylons import config, request, response, session, tmpl_context as c, url
   7 from pylons.controllers.util import abort, redirect_to
   8 from routes import request_config
   9 from sqlalchemy.orm.exc import NoResultFound
  10
  11 from spline import model
  12 from spline.model import meta
  13 from spline.lib import helpers as h
  14 from spline.lib.base import BaseController, render
  15
  16 log = logging.getLogger(__name__)
  17
  18
  19 class ProfileEditForm(Form):
  20     name = fields.TextField(u'Display name', [validators.Required()])
  21
  22     def validate_name(form, field):
  23         if not 1 < len(field.data) <= 20:
  24             raise ValidationError("Name can't be longer than 20 characters")
  25
  26         any_real_characters = False
  27         for char in field.data:
  28             cat = unicodedata.category(char)
  29
  30             # Non-spacing marks and spaces don't count as letters
  31             if cat not in ('Mn', 'Zs'):
  32                 any_real_characters = True
  33
  34             # Disallow control characters, format characters, non-assigned,
  35             # private use, surrogates, spacing-combining marks (for Arabic,
  36             # etc), enclosing marks (millions sign), line-spacing,
  37             # paragraph-spacing.
  38             # This also, thankfully, includes the RTL characters.
  39             if cat in ('Cc', 'Cf', 'Cn', 'Co', 'Cs', 'Mc', 'Me', 'Zl', 'Zp'):
  40                 raise ValidationError("Please don't play stupid Unicode tricks")
  41
  42 class UsersController(BaseController):
  43
  44     def index(self):
  45         # Return a rendered template
  46         #   return render('/template.mako')
  47         # or, Return a response
  48         return 'stub'
  49
  50     def profile(self, id, name=None):
  51         """Main user profile.
  52
  53         URL is /users/id:name, where 'name' only exists for readability and is
  54         entirely optional and ignored.
  55         """
  56
  57         c.page_user = meta.Session.query(model.User).get(id)
  58         if not c.page_user:
  59             abort(404)
  60
  61         return render('/users/profile.mako')
  62
  63     def profile_edit(self, id, name=None):
  64         """Main user profile editing."""
  65         c.page_user = meta.Session.query(model.User).get(id)
  66         if not c.page_user:
  67             abort(404)
  68
  69         # XXX could use some real permissions
  70         if c.page_user != c.user:
  71             abort(403)
  72
  73         c.form = ProfileEditForm(request.params,
  74             name=c.page_user.name,
  75         )
  76
  77         if request.method != 'POST' or not c.form.validate():
  78             return render('/users/profile_edit.mako')
  79
  80
  81         c.page_user.name = c.form.name.data
  82
  83         meta.Session.add(c.page_user)
  84         meta.Session.commit()
  85
  86         h.flash('Saved your profile.', icon='tick')
  87
  88         redirect_to(controller='users', action='profile',
  89                     id=c.page_user.id, name=c.page_user.name,
  90                     _code=303)