Change to users rights

theopuhl
1 parent 566039c5
Showing 7 changed files with 69 additions and 42 deletions Show diff stats
src/common/admin.py
src/common/models.py
src/dashboard/decorator.py
src/dashboard/templates/dashboard/operator_state.html
src/dashboard/templatetags/tags.py
src/dashboard/urls.py
src/dashboard/views.py
@@ -257,4 +257,6 @@ admin.site.register(UserLevel, UserLevelAdmin)
 admin.site.register(Version)
 admin.site.register(WeatherWatch)
 admin.site.register(WeatherWatchHistory)
+admin.site.register(PlcDeviceStatus)
+admin.site.register(PlcDevice)
 admin.site.register(Config)
 \ No newline at end of file
@@ -846,6 +846,7 @@ class Config(models.Model):
     global_mode = models.BooleanField(default='True')
     ack = models.BooleanField(default='False')
     bypass = models.BooleanField(default='True')
+    lock = models.BooleanField(default='False')
     pyros_state = models.CharField(max_length=25, default=SCHEDULER_STATE[0])
     force_passive_mode = models.BooleanField(default='False')
     plc_timeout_seconds = models.PositiveIntegerField(default=60)
 from django.core.exceptions import PermissionDenied
+from functools import wraps
+from django.http import HttpResponseForbidden
+
+
+def level_required(level=0):
+    def wrapper(view_func):
+        def _decorator(request, *args, **kwargs):
+            if (request.user.user_level.priority < level):
+                return HttpResponseForbidden()
+            response = view_func(request, *args, **kwargs)
+            return response
+        return wraps(view_func)(_decorator)
+    return wrapper    
+
  
-def superuser_only(function):
-    """
-    Limit view to superusers only.
-    
-    Usage:
-    --------------------------------------------------------------------------
-    @superuser_only
-    def my_view(request):
-        ...
-    --------------------------------------------------------------------------
-    
-    or in urls:
-    
-    --------------------------------------------------------------------------
-    urlpatterns = patterns('',
-        (r'^foobar/(.*)', is_staff(my_view)),
-    )
-    --------------------------------------------------------------------------    
-    """
-    def _inner(request, *args, **kwargs):
-        if not request.user.is_superuser:
-            raise PermissionDenied           
-        return function(request, *args, **kwargs)
-    return _inner
 \ No newline at end of file
@@ -91,9 +91,18 @@
 </div>
 <br><br><br>
 <div class="text-center">
-	
-    <a id="button" class="btn btn-primary btn-lg" href="{% url "change_globalMode" %}" onclick="return confirm('Are you sure you want to switch the controller mode ?')"> {% global_mode_state  request %} </a>
-    <br> <a id="button" class="btn btn-danger btn-lg" href="{% url "change_bypass" %}" onclick="return confirm('Are you sure you want to bypass the Plc ?')"> {% bypass request %} </a>
+	{% if is_safe == True and config.global_mode == False and config.lock == False %}
+    	<a id="button" class="btn btn-primary btn-lg" href="{% url "change_globalMode" %}" onclick="return confirm('Are you sure you want to switch the controller mode ?')"> {% global_mode_state  request %} </a>
+	{% endif %}
+	{% if config.global_mode == True and config.lock == False %}
+		<a id="button" class="btn btn-primary btn-lg" href="{% url "change_globalMode" %}" onclick="return confirm('Are you sure you want to switch the controller mode ?')"> {% global_mode_state  request %} </a>
+	{% endif %}
+	{% if is_safe == False %}
+		<br> <a id="button" class="btn btn-primary btn-lg" href="{% url "change_bypass" %}" onclick="return confirm('Are you sure you want to bypass the PLC ?')"> {% bypass request %} </a>
+	{% endif %}
+	{% if is_safe == True %}
+		<br> <a id="button" class="btn btn-primary btn-lg" href="{% url "change_lock" %}" onclick="return confirm('Are you sure you want to lock the whole observatory ?')"> {% lock request %} </a>
+	{% endif %}
 </div>
  
 {% endblock %}
 \ No newline at end of file
@@ -24,22 +24,22 @@ def global_mode_state(request):
         return ("NO CONFIG DB")
  
 @register.simple_tag
-def ack(request):
+def bypass(request):
     try:
-        if (Config.objects.get(id=1).ack == False):
-            return("Give ACK")
+        if (Config.objects.get(id=1).bypass == False):
+            return("Bypass PLC")
         else:
-            return("Remove ACK")
+            return("Stop Bypass PLC")
     except Config.DoesNotExist:
         return ("NO CONFIG DB")
  
 @register.simple_tag
-def bypass(request):
+def lock(request):
     try:
-        if (Config.objects.get(id=1).bypass == False):
-            return("Bypass PLC")
+        if (Config.objects.get(id=1).lock == False):
+            return("Lock Observatory")
         else:
-            return("Remove PLC bypass")
+            return("Unlock Observatory")
     except Config.DoesNotExist:
         return ("NO CONFIG DB")
  
@@ -6,8 +6,8 @@ urlpatterns = [
     path('users', views.users, name="users"),
     path('configuration', views.configUpdate, name='configuration'),
     path('status', views.change_globalMode, name='change_globalMode'),
-    path('ack', views.change_ack, name='change_ack'),
     path('bypass', views.change_bypass, name='change_bypass'),
+    path('lock', views.change_lock, name='change_lock'),
     path('routines', views.routines, name="routines"),
     path('weather', views.weather, name="weather"),
     path('weather/current', views.weather_current, name="weather_current"),
@@ -8,7 +8,7 @@ from django.core import serializers
 import utils.Logger as l
 from django.forms import modelformset_factory
 from dashboard.forms import ConfigForm, UserForm
-from dashboard.decorator import superuser_only
+from dashboard.decorator import level_required
 from django.views.generic.edit import UpdateView
 from django.shortcuts import get_object_or_404
 from django.utils.decorators import method_decorator
@@ -111,11 +111,13 @@ def retrieve_main_icon(request):
             raise Http404("No WeatherWatch matches the given query.")
  
 @login_required
+@level_required(6)
 def users(request):
     instance = PyrosUser.objects.order_by("-id")
     return render(request, 'dashboard/users_management.html', {'instance': instance})                     # return the initial view (the users management's one) 
  
 @login_required
+@level_required(2)
 def routines(request):
     url_ = reverse('admin:common_request_changelist')
     return redirect(url_)
@@ -159,6 +161,7 @@ def site_current(request):
         return render(request, 'dashboard/current_site.html', {'site_info' : None, 'iteration' : 60})
  
 @login_required
+@level_required(2)
 def proposal(request):
     if (len(ScientificProgram.objects.all()) > 0):                              # checking if the observatory table is empty
         proposal_info = ScientificProgram.objects.order_by("-id")[:100]         # Sorting Weather table
@@ -171,6 +174,7 @@ def proposal(request):
     return render(request, 'dashboard/proposal.html', {'proposal_info' : proposal_info, 'nb_info_proposal' : nb_info_proposal})
  
 @login_required
+@level_required(5)
 def configUpdate(request):
     instance = get_object_or_404(Config, id=1)
     form = ConfigForm(request.POST or None, instance=instance)
@@ -210,14 +214,19 @@ def schedule(request):
  
  
 @login_required
+@level_required(6)
 def quotas(request):
     url_ = reverse('admin:common_pyrosuser_changelist')
     return redirect(url_)
  
 @login_required
+@level_required(3)
 def change_globalMode(request):
     try :
         config = get_object_or_404(Config, id=1)
+        plc_device_status = PlcDeviceStatus.objects.exclude(plc_mode=None).latest('created')
+        if config.global_mode == False and plc_device_status.is_safe == False:
+            return redirect('states')
         config.global_mode = not config.global_mode
         config.save()
         return redirect('states')
@@ -225,26 +234,35 @@ def change_globalMode(request):
         return redirect('states')
  
 @login_required
-def change_ack(request):
+@level_required(4)
+def change_bypass(request):
     try :
         config = get_object_or_404(Config, id=1)
-        config.ack = not config.ack
+        plc_device_status = PlcDeviceStatus.objects.exclude(plc_mode=None).latest('created')
+        if plc_device_status.is_safe == True:
+            return redirect('states')
+        config.bypass = not config.bypass
         config.save()
         return redirect('states')
     except Config.DoesNotExist:
         return redirect('states')
  
 @login_required
-def change_bypass(request):
+@level_required(3)
+def change_lock(request):
     try :
         config = get_object_or_404(Config, id=1)
-        config.bypass = not config.bypass
+        plc_device_status = PlcDeviceStatus.objects.exclude(plc_mode=None).latest('created')
+        if config.lock == False and plc_device_status.is_safe == False:
+            return redirect('states')
+        config.lock = not config.lock
         config.save()
         return redirect('states')
     except Config.DoesNotExist:
         return redirect('states')
  
 @login_required
+@level_required(6)
 def change_activate(request, pk):
     try :
         user = get_object_or_404(PyrosUser, pk=pk)
@@ -268,6 +286,7 @@ def change_activate(request, pk):
         return redirect('user-detail', pk=pk)
  
 @login_required
+@level_required(3)
 def send_command_to_telescope(request):
     data = "lol"
     with open('../simulators/config/grammar.json') as f:
@@ -276,6 +295,7 @@ def send_command_to_telescope(request):
     return render(request, "dashboard/send_command_telescope.html", locals())
  
 @login_required
+@level_required(3)
 def submit_command_to_telescope(request):
     if request.method == 'POST':
         commands = [request.POST.get("comande"), request.POST.get("param1")]
@@ -289,6 +309,7 @@ def submit_command_to_telescope(request):
     return redirect('send_command_to_telescope')
  
 @login_required
+@level_required(3)
 def submit_command_to_telescope_expert(request):
     import os
     if request.method == 'POST':
@@ -301,6 +322,7 @@ def submit_command_to_telescope_expert(request):
     return redirect('submit_command_to_telescope')
  
 @login_required
+@level_required(2)
 def user_detail_view(request,pk):
     try:
         user_id=PyrosUser.objects.get(pk=pk)
@@ -310,6 +332,7 @@ def user_detail_view(request,pk):
     return render(request, 'dashboard/user_detail.html', context={'user' : user_id, 'current_user' : current_user, 'USER_LEVEL': request.user.user_level.priority})
  
 @login_required
+@level_required(6)
 def user_detail_edit(request,pk):
     edit = get_object_or_404(PyrosUser, pk=pk)
     form = UserForm(request.POST or None, instance=edit)
@@ -319,6 +342,8 @@ def user_detail_edit(request,pk):
     return render(request, 'dashboard/user_detail_edit.html', {'form': form})
  
 @login_required
+@level_required(3)
 def operator_state(request):
     instance = get_object_or_404(Config, id=1)
-    return render(request, 'dashboard/operator_state.html', {'config' : instance})
 \ No newline at end of file
+    plc_device_status = PlcDeviceStatus.objects.exclude(plc_mode=None).latest('created')
+    return render(request, 'dashboard/operator_state.html', {'config' : instance, 'is_safe' : plc_device_status.is_safe})
 \ No newline at end of file