05788ef450
When running mediagoblin in a sub path on a web server, most things inside mediagoblin need the "inside path", but when generating URLs for the webbrowser, full paths are needed. urlgen and routes already do that. Some (mostly pagination and login) need the URL of the current page. They used request.path_info. But this is the "inside" path, not the full. So now there is request.full_path and its used in various places.
142 lines
4.5 KiB
Python
142 lines
4.5 KiB
Python
# GNU MediaGoblin -- federated, autonomous media hosting
|
|
# Copyright (C) 2011 MediaGoblin contributors. See AUTHORS.
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Affero General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
|
|
from webob import exc
|
|
|
|
from mediagoblin.tools.response import redirect, render_404
|
|
from mediagoblin.db.util import ObjectId, InvalidId
|
|
|
|
|
|
def _make_safe(decorator, original):
|
|
"""
|
|
Copy the function data from the old function to the decorator.
|
|
"""
|
|
decorator.__name__ = original.__name__
|
|
decorator.__dict__ = original.__dict__
|
|
decorator.__doc__ = original.__doc__
|
|
return decorator
|
|
|
|
|
|
def require_active_login(controller):
|
|
"""
|
|
Require an active login from the user.
|
|
"""
|
|
def new_controller_func(request, *args, **kwargs):
|
|
if request.user and \
|
|
request.user.get('status') == u'needs_email_verification':
|
|
return redirect(
|
|
request, 'mediagoblin.user_pages.user_home',
|
|
user=request.user['username'])
|
|
elif not request.user or request.user.get('status') != u'active':
|
|
return exc.HTTPFound(
|
|
location="%s?next=%s" % (
|
|
request.urlgen("mediagoblin.auth.login"),
|
|
request.full_path))
|
|
|
|
return controller(request, *args, **kwargs)
|
|
|
|
return _make_safe(new_controller_func, controller)
|
|
|
|
|
|
def user_may_delete_media(controller):
|
|
"""
|
|
Require user ownership of the MediaEntry to delete.
|
|
"""
|
|
def wrapper(request, *args, **kwargs):
|
|
uploader = request.db.MediaEntry.find_one(
|
|
{'_id': ObjectId(request.matchdict['media'])}).uploader()
|
|
if not (request.user['is_admin'] or
|
|
request.user['_id'] == uploader['_id']):
|
|
return exc.HTTPForbidden()
|
|
|
|
return controller(request, *args, **kwargs)
|
|
|
|
return _make_safe(wrapper, controller)
|
|
|
|
|
|
def uses_pagination(controller):
|
|
"""
|
|
Check request GET 'page' key for wrong values
|
|
"""
|
|
def wrapper(request, *args, **kwargs):
|
|
try:
|
|
page = int(request.GET.get('page', 1))
|
|
if page < 0:
|
|
return render_404(request)
|
|
except ValueError:
|
|
return render_404(request)
|
|
|
|
return controller(request, page=page, *args, **kwargs)
|
|
|
|
return _make_safe(wrapper, controller)
|
|
|
|
|
|
def get_user_media_entry(controller):
|
|
"""
|
|
Pass in a MediaEntry based off of a url component
|
|
"""
|
|
def wrapper(request, *args, **kwargs):
|
|
user = request.db.User.find_one(
|
|
{'username': request.matchdict['user']})
|
|
|
|
if not user:
|
|
return render_404(request)
|
|
|
|
media = request.db.MediaEntry.find_one(
|
|
{'slug': request.matchdict['media'],
|
|
'state': 'processed',
|
|
'uploader': user['_id']})
|
|
|
|
# no media via slug? Grab it via ObjectId
|
|
if not media:
|
|
try:
|
|
media = request.db.MediaEntry.find_one(
|
|
{'_id': ObjectId(request.matchdict['media']),
|
|
'state': 'processed',
|
|
'uploader': user['_id']})
|
|
except InvalidId:
|
|
return render_404(request)
|
|
|
|
# Still no media? Okay, 404.
|
|
if not media:
|
|
return render_404(request)
|
|
|
|
return controller(request, media=media, *args, **kwargs)
|
|
|
|
return _make_safe(wrapper, controller)
|
|
|
|
def get_media_entry_by_id(controller):
|
|
"""
|
|
Pass in a MediaEntry based off of a url component
|
|
"""
|
|
def wrapper(request, *args, **kwargs):
|
|
try:
|
|
media = request.db.MediaEntry.find_one(
|
|
{'_id': ObjectId(request.matchdict['media']),
|
|
'state': 'processed'})
|
|
except InvalidId:
|
|
return render_404(request)
|
|
|
|
# Still no media? Okay, 404.
|
|
if not media:
|
|
return render_404(request)
|
|
|
|
return controller(request, media=media, *args, **kwargs)
|
|
|
|
return _make_safe(wrapper, controller)
|
|
|