Use full-caps name for user link URLs.
[zzz-spline-users.git] / spline / plugins / users / controllers / users.py
1 import logging
2 import unicodedata
3
4 from wtforms import Form, ValidationError, fields, validators, widgets
5
6 from pylons import config, request, response, session, tmpl_context as c, url
7 from pylons.controllers.util import abort, redirect_to
8 from routes import request_config
9 from sqlalchemy.orm.exc import NoResultFound
10
11 from spline import model
12 from spline.model import meta
13 from spline.lib import helpers as h
14 from spline.lib.base import BaseController, render
15
16 log = logging.getLogger(__name__)
17
18
19 class ProfileEditForm(Form):
20 name = fields.TextField(u'Display name', [validators.Required()])
21
22 def validate_name(form, field):
23 if not 1 < len(field.data) <= 20:
24 raise ValidationError("Name can't be longer than 20 characters")
25
26 any_real_characters = False
27 for char in field.data:
28 cat = unicodedata.category(char)
29
30 # Non-spacing marks and spaces don't count as letters
31 if cat not in ('Mn', 'Zs'):
32 any_real_characters = True
33
34 # Disallow control characters, format characters, non-assigned,
35 # private use, surrogates, spacing-combining marks (for Arabic,
36 # etc), enclosing marks (millions sign), line-spacing,
37 # paragraph-spacing.
38 # This also, thankfully, includes the RTL characters.
39 if cat in ('Cc', 'Cf', 'Cn', 'Co', 'Cs', 'Mc', 'Me', 'Zl', 'Zp'):
40 raise ValidationError("Please don't play stupid Unicode tricks")
41
42 class UsersController(BaseController):
43
44 def index(self):
45 # Return a rendered template
46 # return render('/template.mako')
47 # or, Return a response
48 return 'stub'
49
50 def profile(self, id, name=None):
51 """Main user profile.
52
53 URL is /users/id:name, where 'name' only exists for readability and is
54 entirely optional and ignored.
55 """
56
57 c.page_user = meta.Session.query(model.User).get(id)
58 if not c.page_user:
59 abort(404)
60
61 return render('/users/profile.mako')
62
63 def profile_edit(self, id, name=None):
64 """Main user profile editing."""
65 c.page_user = meta.Session.query(model.User).get(id)
66 if not c.page_user:
67 abort(404)
68
69 # XXX could use some real permissions
70 if c.page_user != c.user:
71 abort(403)
72
73 c.form = ProfileEditForm(request.params,
74 name=c.page_user.name,
75 )
76
77 if request.method != 'POST' or not c.form.validate():
78 return render('/users/profile_edit.mako')
79
80
81 c.page_user.name = c.form.name.data
82
83 meta.Session.add(c.page_user)
84 meta.Session.commit()
85
86 h.flash('Saved your profile.', icon='tick')
87
88 redirect_to(controller='users', action='profile',
89 id=c.page_user.id, name=c.page_user.name,
90 _code=303)