67 lines
2.5 KiB
Python
67 lines
2.5 KiB
Python
|
from django.forms import widgets
|
||
|
|
from django.shortcuts import get_object_or_404
|
||
|
from django.utils.translation import ugettext_lazy as _
|
||
|
|
from rest_framework import serializers
|
||
|
|
|
||
|
|
from orchestra.api.serializers import HyperlinkedModelSerializer
|
||
|
|
from orchestra.contrib.accounts.serializers import AccountSerializerMixin
|
||
|
|
from orchestra.core.validators import validate_password
|
||
|
|
|
||
|
|
from .models import SystemUser
|
||
|
|
|
||
|
|
|
||
|
|
class GroupSerializer(AccountSerializerMixin, serializers.HyperlinkedModelSerializer):
|
||
|
|
class Meta:
|
||
|
|
model = SystemUser
|
||
|
|
fields = ('url', 'username',)
|
||
|
|
|
||
|
|
def from_native(self, data, files=None):
|
||
|
|
queryset = self.opts.model.objects.filter(account=self.account)
|
||
|
|
return get_object_or_404(queryset, username=data['username'])
|
||
|
|
|
||
|
|
|
||
|
|
class SystemUserSerializer(AccountSerializerMixin, HyperlinkedModelSerializer):
|
||
|
|
password = serializers.CharField(max_length=128, label=_('Password'),
|
||
|
|
validators=[validate_password], write_only=True, required=False,
|
||
|
|
widget=widgets.PasswordInput)
|
||
|
|
groups = GroupSerializer(many=True, allow_add_remove=True, required=False)
|
||
|
|
|
||
|
|
class Meta:
|
||
|
|
model = SystemUser
|
||
|
|
fields = (
|
||
|
|
'url', 'username', 'password', 'home', 'directory', 'shell', 'groups', 'is_active',
|
||
|
|
)
|
||
|
|
postonly_fields = ('username',)
|
||
|
|
|
||
|
|
def validate(self, attrs):
|
||
|
|
user = SystemUser(
|
||
|
|
username=attrs.get('username') or self.object.username,
|
||
|
|
shell=attrs.get('shell') or self.object.shell,
|
||
|
|
)
|
||
|
|
user.validate_home(attrs, self.account)
|
||
|
|
return attrs
|
||
|
|
|
||
|
|
def validate_password(self, attrs, source):
|
||
|
|
""" POST only password """
|
||
|
|
if self.object:
|
||
|
|
if 'password' in attrs:
|
||
|
|
raise serializers.ValidationError(_("Can not set password"))
|
||
|
|
elif 'password' not in attrs:
|
||
|
|
raise serializers.ValidationError(_("Password required"))
|
||
|
|
return attrs
|
||
|
|
|
||
|
|
def validate_groups(self, attrs, source):
|
||
|
|
groups = attrs.get(source)
|
||
|
|
if groups:
|
||
|
|
for group in groups:
|
||
|
|
if group.username == attrs['username']:
|
||
|
|
raise serializers.ValidationError(
|
||
|
|
_("Do not make the user member of its group"))
|
||
|
|
return attrs
|
||
|
|
|
||
|
|
def save_object(self, obj, **kwargs):
|
||
|
|
# FIXME this method will be called when saving nested serializers :(
|
||
|
|
if not obj.pk:
|
||
|
|
obj.set_password(obj.password)
|
||
|
|
super(SystemUserSerializer, self).save_object(obj, **kwargs)
|