blog: Only allow to edit own posts

[ipfire.org.git] / src / web / blog.py

#!/usr/bin/python

import email.utils
import tornado.web

import handlers_base as base

from . import ui_modules

class IndexHandler(base.BaseHandler):
	def get(self):
		posts = self.backend.blog.get_newest(limit=3)

		self.render("blog/index.html", posts=posts)


class AuthorHandler(base.BaseHandler):
	def get(self, uid):
		author = self.accounts.get_by_uid(uid)
		if not author:
			raise tornado.web.HTTPError(404, "User is unknown")

		# Get all posts from this author
		posts = self.backend.blog.get_by_author(author)
		if not posts:
			raise tornado.web.HTTPError(404, "User has no posts")

		self.render("blog/author.html", author=author, posts=posts)


class FeedHandler(base.BaseHandler):
	def get(self):
		cache_key = "%s-%s" % (self.request.host, self.request.path)

		# Get feed from cache if possible
		feed = self.memcached.get(cache_key)
		if not feed:
			posts = self.backend.blog.get_newest(limit=50)

			# Render the feed
			feed = self.render_string("blog/feed.xml", posts=posts,
				now=email.utils.formatdate())

			# Store in cache for 5min
			self.memcached.set(cache_key, feed, 300)

		# Set correct content type
		self.set_header("Content-Type", "application/rss+xml")

		# Deliver content
		self.finish(feed)


class PostHandler(base.BaseHandler):
	def get(self, slug):
		post = self.backend.blog.get_by_slug(slug, published=not self.current_user)
		if not post:
			raise tornado.web.HTTPError(404)

		self.render("blog/post.html", post=post)


class DraftsHandler(base.BaseHandler):
	@tornado.web.authenticated
	def get(self):
		drafts = self.backend.blog.get_drafts(author=self.current_user)

		self.render("blog/drafts.html", drafts=drafts)


class SearchHandler(base.BaseHandler):
	def get(self):
		q = self.get_argument("q")

		posts = self.backend.blog.search(q, limit=50)
		if not posts:
			raise tornado.web.HTTPError(404, "Nothing found")

		self.render("blog/search-results.html", q=q, posts=posts)


class TagHandler(base.BaseHandler):
	def get(self, tag):
		posts = self.backend.blog.get_by_tag(tag)
		if not posts:
			raise tornado.web.HTTPError(404, "There are no posts with tag: %s" % tag)

		self.render("blog/tag.html", posts=posts, tag=tag)


class YearHandler(base.BaseHandler):
	def get(self, year):
		posts = self.backend.blog.get_by_year(year)
		if not posts:
			raise tornado.web.HTTPError(404, "There are no posts in %s" % year)

		self.render("blog/year.html", posts=posts, year=year)


class ComposeHandler(base.BaseHandler):
	@tornado.web.authenticated
	def get(self):
		self.render("blog/compose.html", post=None)

	@tornado.web.authenticated
	def post(self):
		title = self.get_argument("title")
		text  = self.get_argument("text")
		tags  = self.get_argument("tags", None)

		with self.db.transaction():
			post = self.backend.blog.create_post(title, text,
				author=self.current_user, tags=tags)

		self.redirect("/drafts")


class EditHandler(base.BaseHandler):
	@tornado.web.authenticated
	def get(self, slug):
		post = self.backend.blog.get_by_slug(slug, published=False)
		if not post:
			raise tornado.web.HTTPError(404)

		# Check if post is editable
		if not post.is_editable(self.current_user):
			raise tornado.web.HTTPError(403, "%s cannot edit %s" % (self.current_user, post))

		self.render("blog/compose.html", post=post)

	@tornado.web.authenticated
	def post(self, slug):
		post = self.backend.blog.get_by_slug(slug, published=False)
		if not post:
			raise tornado.web.HTTPError(404)

		# Check if post is editable
		if not post.is_editable(self.current_user):
			raise tornado.web.HTTPError(403, "%s cannot edit %s" % (self.current_user, post))

		with self.db.transaction():
			# Update title
			post.title = self.get_argument("title")

			# Update text
			post.text = self.get_argument("text")

			# Update tags
			post.tags = (t.strip() for t in self.get_argument("tags", "").split(","))

			# Mark post as updated
			post.updated()

		# Return to blog if the post is already published
		if post.is_published():
			self.redirect("/post/%s" % post.slug)
			return

		# Otherwise return to drafts
		self.redirect("/drafts")


class HistoryNavigationModule(ui_modules.UIModule):
	def render(self):
		return self.render_string("blog/modules/history-navigation.html",
			years=self.backend.blog.years)


class ListModule(ui_modules.UIModule):
	def render(self, posts):
		return self.render_string("blog/modules/list.html", posts=posts)


class PostModule(ui_modules.UIModule):
	def render(self, post):
		return self.render_string("blog/modules/post.html", post=post)


class PostsModule(ui_modules.UIModule):
	def render(self, posts):
		return self.render_string("blog/modules/posts.html", posts=list(posts))