b46a13bc28897b4475c6cf70bba032ff82ee4b1c
[Plinn.git] / RegistrationTool.py
1 # -*- coding: utf-8 -*-
2 #######################################################################################
3 # Plinn - http://plinn.org #
4 # © 2005-2013 Benoît PIN <pin@cri.ensmp.fr> #
5 # #
6 # This program is free software; you can redistribute it and/or #
7 # modify it under the terms of the GNU General Public License #
8 # as published by the Free Software Foundation; either version 2 #
9 # of the License, or (at your option) any later version. #
10 # #
11 # This program is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
15 # #
16 # You should have received a copy of the GNU General Public License #
17 # along with this program; if not, write to the Free Software #
18 # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. #
19 #######################################################################################
20 """ Plinn registration tool: implements 3 modes to register members:
21 anonymous, manager, reviewed.
22
23
24
25 """
26
27 from Globals import InitializeClass, PersistentMapping
28 from Products.PageTemplates.PageTemplateFile import PageTemplateFile
29 from Products.CMFDefault.RegistrationTool import RegistrationTool as BaseRegistrationTool
30 from AccessControl import ClassSecurityInfo, ModuleSecurityInfo
31 from AccessControl.Permission import Permission
32 from BTrees.OOBTree import OOBTree
33 from Products.CMFCore.permissions import ManagePortal, AddPortalMember
34 from Products.CMFCore.exceptions import AccessControl_Unauthorized
35 from Products.CMFCore.utils import getToolByName
36 from Products.CMFCore.utils import getUtilityByInterfaceName
37 from Products.GroupUserFolder.GroupsToolPermissions import ManageGroups
38 from Products.Plinn.utils import Message as _
39 from Products.Plinn.utils import encodeQuopriEmail
40 from DateTime import DateTime
41 from types import TupleType, ListType
42 from uuid import uuid4
43 from quopri import encodestring
44
45 security = ModuleSecurityInfo('Products.Plinn.RegistrationTool')
46 MODE_ANONYMOUS = 'anonymous'
47 security.declarePublic('MODE_ANONYMOUS')
48
49 MODE_MANAGER = 'manager'
50 security.declarePublic('MODE_MANAGER')
51
52 MODE_REVIEWED = 'reviewed'
53 security.declarePublic('MODE_REVIEWED')
54
55 MODES = [MODE_ANONYMOUS, MODE_MANAGER, MODE_REVIEWED]
56 security.declarePublic('MODES')
57
58 DEFAULT_MEMBER_GROUP = 'members'
59 security.declarePublic('DEFAULT_MEMBER_GROUP')
60
61
62
63 class RegistrationTool(BaseRegistrationTool) :
64
65 """ Create and modify users by making calls to portal_membership.
66 """
67
68 meta_type = "Plinn Registration Tool"
69
70 manage_options = ({'label' : 'Registration mode', 'action' : 'manage_regmode'}, ) + \
71 BaseRegistrationTool.manage_options
72
73 security = ClassSecurityInfo()
74
75 security.declareProtected( ManagePortal, 'manage_regmode' )
76 manage_regmode = PageTemplateFile('www/configureRegistrationTool', globals(),
77 __name__='manage_regmode')
78
79 def __init__(self) :
80 self._mode = MODE_ANONYMOUS
81 self._chain = ''
82 self._passwordResetRequests = OOBTree()
83
84 security.declareProtected(ManagePortal, 'configureTool')
85 def configureTool(self, registration_mode, chain, REQUEST=None) :
86 """ """
87
88 if registration_mode not in MODES :
89 raise ValueError, "Unknown mode: " + registration_mode
90 else :
91 self._mode = registration_mode
92 self._updatePortalRoleMappingForMode(registration_mode)
93
94 wtool = getToolByName(self, 'portal_workflow')
95
96 if registration_mode == MODE_REVIEWED :
97 if not hasattr(wtool, '_chains_by_type') :
98 wtool._chains_by_type = PersistentMapping()
99 wfids = []
100 chain = chain.strip()
101
102 if chain == '(Default)' :
103 try : del wtool._chains_by_type['Member Data']
104 except KeyError : pass
105 self._chain = chain
106 else :
107 for wfid in chain.replace(',', ' ').split(' ') :
108 if wfid :
109 if not wtool.getWorkflowById(wfid) :
110 raise ValueError, '"%s" is not a workflow ID.' % wfid
111 wfids.append(wfid)
112
113 wtool._chains_by_type['Member Data'] = tuple(wfids)
114 self._chain = ', '.join(wfids)
115 else :
116 wtool._chains_by_type['Member Data'] = tuple()
117
118 if REQUEST :
119 REQUEST.RESPONSE.redirect(self.absolute_url() + '/manage_regmode?manage_tabs_message=Saved changes.')
120
121 def _updatePortalRoleMappingForMode(self, mode) :
122
123 urlTool = getToolByName(self, 'portal_url')
124 portal = urlTool.getPortalObject()
125
126 if mode in [MODE_ANONYMOUS, MODE_REVIEWED] :
127 portal.manage_permission(AddPortalMember, roles = ['Anonymous', 'Manager'], acquire=1)
128 elif mode == MODE_MANAGER :
129 portal.manage_permission(AddPortalMember, roles = ['Manager', 'UserManager'], acquire=0)
130
131 security.declarePublic('getMode')
132 def getMode(self) :
133 # """ return current mode """
134 return self._mode[:]
135
136 security.declarePublic('getWfId')
137 def getWfChain(self) :
138 # """ return current workflow id """
139 return self._chain
140
141 security.declarePublic('roleMappingMismatch')
142 def roleMappingMismatch(self) :
143 # """ test if the role mapping is correct for the currrent mode """
144
145 mode = self._mode
146 urlTool = getToolByName(self, 'portal_url')
147 portal = urlTool.getPortalObject()
148
149 def rolesOfAddPortalMemberPerm() :
150 p=Permission(AddPortalMember, [], portal)
151 return p.getRoles()
152
153 if mode in [MODE_ANONYMOUS, MODE_REVIEWED] :
154 if 'Anonymous' in rolesOfAddPortalMemberPerm() : return False
155
156 elif mode == MODE_MANAGER :
157 roles = rolesOfAddPortalMemberPerm()
158 if 'Manager' in roles or 'UserManager' in roles and len(roles) == 1 and type(roles) == TupleType :
159 return False
160
161 return True
162
163 security.declareProtected(AddPortalMember, 'addMember')
164 def addMember(self, id, password, roles=(), groups=(DEFAULT_MEMBER_GROUP,), domains='', properties=None) :
165 """ Idem CMFCore but without default role """
166 BaseRegistrationTool.addMember(self, id, password, roles=roles,
167 domains=domains, properties=properties)
168
169 if self.getMode() in [MODE_ANONYMOUS, MODE_MANAGER] :
170 gtool = getToolByName(self, 'portal_groups')
171 mtool = getToolByName(self, 'portal_membership')
172 utool = getToolByName(self, 'portal_url')
173 portal = utool.getPortalObject()
174 isGrpManager = mtool.checkPermission(ManageGroups, portal) ## TODO : CMF2.1 compat
175 aclu = self.aq_inner.acl_users
176
177 for gid in groups:
178 g = gtool.getGroupById(gid)
179 if not isGrpManager :
180 if gid != DEFAULT_MEMBER_GROUP:
181 raise AccessControl_Unauthorized, 'You are not allowed to join arbitrary group.'
182
183 if g is None :
184 gtool.addGroup(gid)
185 aclu.changeUser(aclu.getGroupPrefix() +gid, roles=['Member', ])
186 g = gtool.getGroupById(gid)
187 g.addMember(id)
188
189
190 def afterAdd(self, member, id, password, properties):
191 """ notify member creation """
192 member.notifyWorkflowCreated()
193 member.indexObject()
194
195
196 security.declarePublic('requestPasswordReset')
197 def requestPasswordReset(self, userid):
198 """ add uuid / (userid, expiration) pair and return uuid """
199 self.clearExpiredPasswordResetRequests()
200 mtool = getUtilityByInterfaceName('Products.CMFCore.interfaces.IMembershipTool')
201 member = mtool.getMemberById(userid)
202 if member :
203 uuid = str(uuid4())
204 self._passwordResetRequests[uuid] = (userid, DateTime() + 1)
205 utool = getUtilityByInterfaceName('Products.CMFCore.interfaces.IURLTool')
206 ptool = getUtilityByInterfaceName('Products.CMFCore.interfaces.IPropertiesTool')
207 # fuck : mailhost récupéré avec getUtilityByInterfaceName n'est pas correctement
208 # wrappé. Un « unrestrictedTraverse » ne marche pas.
209 # mailhost = getUtilityByInterfaceName('Products.MailHost.interfaces.IMailHost')
210 portal = utool.getPortalObject()
211 mailhost = portal.MailHost
212 sender = encodeQuopriEmail(ptool.getProperty('email_from_name'), ptool.getProperty('email_from_address'))
213 to = encodeQuopriEmail(member.getMemberFullName(nameBefore=0), member.getProperty('email'))
214 subject = "=?utf-8?q?%s?=" % encodestring('Password reset')
215 lines = []
216 pr = lines.append
217 pr('%s/password_reset_form/%s' % (utool(), uuid))
218 body = '\n'.join(lines)
219 message = self.echange_mail_template(From=sender,
220 To=to,
221 Subject=subject,
222 ContentType = 'text/plain',
223 charset = 'UTF-8',
224 body=body)
225 mailhost.send(message)
226
227 security.declarePrivate('clearExpiredPasswordResetRequests')
228 def clearExpiredPasswordResetRequests(self):
229 now = DateTime()
230 for uuid, record in self._passwordResetRequests.items() :
231 userid, date = record
232 if date < now :
233 del self._passwordResetRequests[uuid]
234
235
236 security.declarePublic('resetPassword')
237 def resetPassword(self, uuid, password, confirm) :
238 record = self._passwordResetRequests.get(uuid)
239 if not record :
240 return _('Invalid reset password request.')
241
242 userid, expiration = record
243 now = DateTime()
244 if expiration < now :
245 self.clearExpiredPasswordResetRequests()
246 return _('Your reset password request has expired. You can ask a new one.')
247
248 msg = self.testPasswordValidity(password, confirm=confirm)
249 if not msg : # None if everything ok. Err message otherwise.
250 mtool = getUtilityByInterfaceName('Products.CMFCore.interfaces.IMembershipTool')
251 member = mtool.getMemberById(userid)
252 if member :
253 member.setSecurityProfile(password=password)
254 del self._passwordResetRequests[uuid]
255 return _('Password successfully resetted.')
256 else :
257 return _('"%s" username not found.') % userid
258
259
260 InitializeClass(RegistrationTool)