416 lines
13 KiB
Python
416 lines
13 KiB
Python
# -*- coding: utf8 -*-
|
|
from pyramid.response import Response
|
|
from pyramid.renderers import render, get_renderer
|
|
from pyramid.view import (
|
|
view_config,
|
|
forbidden_view_config,
|
|
)
|
|
from pyramid.security import (
|
|
remember,
|
|
forget,
|
|
)
|
|
from pyramid.httpexceptions import (
|
|
HTTPFound,
|
|
HTTPNotFound,
|
|
HTTPForbidden,
|
|
)
|
|
from datetime import *
|
|
from sqlalchemy.exc import DBAPIError
|
|
from ..security import groupfinder
|
|
from user_agents import parse
|
|
|
|
import json
|
|
import locale
|
|
import hashlib
|
|
import imaplib
|
|
import email
|
|
|
|
from ..models.default import *
|
|
from ..models.agenda import *
|
|
from ..models.dossier import (
|
|
get_chantiers_byName,
|
|
get_clients_byName
|
|
)
|
|
|
|
from ..views.utils import *
|
|
|
|
def to_decimal(x):
|
|
import decimal
|
|
return decimal.Decimal(str(x))
|
|
|
|
def to_euro(x):
|
|
"""Takes a float and returns 12 345,67 €"""
|
|
locale.setlocale(locale.LC_ALL,'')
|
|
return locale.currency(x, True, True)
|
|
|
|
def to_euroz(x):
|
|
"""Takes a float and returns 12 345,67 € if not zero"""
|
|
if x == 0:
|
|
return ''
|
|
else:
|
|
return to_euro(x)
|
|
|
|
def to_decz(x):
|
|
"""Takes a float and returns a number with 2 dec"""
|
|
locale.setlocale(locale.LC_ALL,'')
|
|
if x == 0:
|
|
return ""
|
|
else:
|
|
return locale.format_string('%.2f',x, False)
|
|
|
|
def to_sha1(message):
|
|
return hashlib.sha1(message.encode('utf-8')).hexdigest()
|
|
|
|
def to_int(x):
|
|
try:
|
|
number = int(x.replace(',', '.'))
|
|
return number
|
|
except ValueError:
|
|
return 0
|
|
|
|
def to_percent(x):
|
|
"""Takes a float and returns a string"""
|
|
return ("%.2f " % x).replace('.', ',') + "%"
|
|
|
|
def mailbox_connect(request, societe):
|
|
# connecter au serveur IMAP de la societe
|
|
if societe == 'PE':
|
|
mbx_name = 'peinture-dumas@entreprise-dumas.com'
|
|
mbx_pwd = 'S@sdumas69'
|
|
elif societe == 'ME':
|
|
mbx_name = 'menuiserie-dumas@entreprise-dumas.com'
|
|
mbx_pwd = 'S@sdumas69'
|
|
elif societe == 'PL':
|
|
mbx_name = 'versanit-dumas@entreprise-dumas.com'
|
|
mbx_pwd = 'S@sdumas69'
|
|
elif societe == 'PO':
|
|
mbx_name = 'polynet-dumas@entreprise-dumas.com'
|
|
mbx_pwd = 'S@sdumas69'
|
|
else:
|
|
request.session.flash("Cette société est inconnue ou non traitée : %s" % societe, 'danger')
|
|
return None
|
|
|
|
conn = imaplib.IMAP4_SSL('imap.entreprise-dumas.com')
|
|
try:
|
|
# se connecter à la mailbox
|
|
conn.login(mbx_name, mbx_pwd)
|
|
except imaplib.IMAP4.error:
|
|
request.session.flash("ERREUR connexion au compte %s" % mbx_name, 'danger')
|
|
return None
|
|
|
|
return conn
|
|
|
|
@view_config(route_name='home', renderer='../templates/default/home.pt', permission='view')
|
|
def home(request):
|
|
logged_in = request.authenticated_userid.upper()
|
|
# lire la fiche de l'utilisateur
|
|
member = get_member_by_id(request, logged_in)
|
|
access = member.access
|
|
agenda = member.agenda
|
|
|
|
datedeb = date.today().strftime("%Y-%m-%d")
|
|
|
|
nb_dd_restants = [] # get_dd_restant(request)
|
|
nb_de_restants = [] # get_de_restant(request)
|
|
nb_fa_restants = [] # get_fa_restant(request)
|
|
|
|
nb_rdv = get_rdv_by_date(request, datedeb, agenda)
|
|
nb_rdf = get_rdf_null(request)
|
|
|
|
# Récupération le nombre de mails en attente
|
|
societes = ['PE','ME','PL','PO']
|
|
|
|
# critères de recherche des demandes d'interventions de la MAIF
|
|
search_criteria = ['FROM gestionsinistre@maif.fr SUBJECT "Intervention entreprise partenaire" UNDELETED',
|
|
'FROM service.sinistres@domus-services.fr UNDELETED']
|
|
|
|
nb_mails = 0
|
|
"""
|
|
# lister les demandes par societe
|
|
for societe in societes:
|
|
conn = mailbox_connect(request, societe)
|
|
if conn != None:
|
|
# select INBOX
|
|
rv, data = conn.select('INBOX', readonly =True)
|
|
|
|
# créer la liste des entêtes des messages à afficher
|
|
for criteria in search_criteria:
|
|
rv, data = conn.search(None, criteria)
|
|
if rv != 'OK':
|
|
request.session.flash("ERREUR de lecture de la boîte de réception", 'danger')
|
|
return HTTPFound(location=request.route_url('home'))
|
|
|
|
# ng de mails dans la mailbax
|
|
nb_mails += len(data[0])
|
|
|
|
# deconnexion du serveur
|
|
conn.close()
|
|
conn.logout()
|
|
"""
|
|
return {
|
|
'page_title': 'Bienvenue sur %s' % request.host,
|
|
'project': 'mondumas',
|
|
'access': access,
|
|
'logged_in': logged_in,
|
|
'nb_dd_restants': nb_dd_restants,
|
|
'nb_de_restants': nb_de_restants,
|
|
# 'nb_fa_restants': nb_fa_restants,
|
|
'nb_rdv': nb_rdv,
|
|
'nb_rdf': nb_rdf,
|
|
'nb_mails': nb_mails,
|
|
}
|
|
|
|
@view_config(route_name='envoyer_mdp', renderer='../templates/default/envoyer_mdp.pt')
|
|
def envoyer_mdp(request):
|
|
url = request.route_url('envoyer_mdp')
|
|
message = ''
|
|
|
|
if 'form.submitted' in request.params:
|
|
login = request.params['login']
|
|
member = get_member_by_id(request, login)
|
|
if member:
|
|
# Fabrication du corps du email_passwordMessage
|
|
lien = update_membre_mdp_oublie(request, login)
|
|
body = """
|
|
<p>Bonjour,</p>
|
|
|
|
<p>Le lien suivant vous dirigera vers une page où vous pourrez ré-initialiser votre mot de passe d'accès à <b>gestion.entreprise-dumas.com</b>:</p>
|
|
|
|
<p>%s</p>
|
|
|
|
<p>(Ce lien est valide pendant 168 heures.</p>
|
|
|
|
|
|
<p>
|
|
Cordialement,<br />
|
|
gestion.entreprise-dumas.com
|
|
</p>
|
|
""" % (request.route_url('redefinir_mdp', lien=lien))
|
|
# envoyer l'email
|
|
expediteur = request.registry.settings['mondumas.admin_email']
|
|
error = send_mail(request, expediteur, [member.email,], "[Ent. Dumas] Demande de ré-initialisation du mot de passe", body)
|
|
if len(error) > 0:
|
|
request.session.flash(error, 'warning')
|
|
else:
|
|
request.session.flash("Le lien permettant pour redéfinir votre mot de passe vous a été envoyé à l'adresse : %s." % member.email, 'success')
|
|
return HTTPFound(location=request.route_url('affiche_message', login=login))
|
|
else:
|
|
message = "Le mot de passe fourni est incorrect."
|
|
return {
|
|
'page_title': "Changer mon mot de passe",
|
|
'url': url,
|
|
'message': message,
|
|
}
|
|
|
|
@view_config(route_name='changer_mdp', renderer='../templates/default/changer_mdp.pt', permission='view')
|
|
def changer_mdp(request):
|
|
url = request.route_url('changer_mdp')
|
|
logged_in = request.authenticated_userid
|
|
message = ''
|
|
|
|
member = get_member_by_id(request, logged_in)
|
|
if member:
|
|
if 'form.submitted' in request.params:
|
|
old_password = request.params['old_password']
|
|
new_password = request.params['new_password1']
|
|
if member.mdp == to_sha1(old_password):
|
|
update_membre_mdp(request, logged_in, new_password)
|
|
request.session.flash("Votre mot de passe a été mis à jour avec succès.")
|
|
return HTTPFound(location=request.route_url('home'))
|
|
else:
|
|
message = "Le mot de passe actuel n'est pas correct."
|
|
|
|
return {
|
|
'page_title': "Changer mon mot de passe",
|
|
'url': url,
|
|
'member': member,
|
|
'message': message,
|
|
}
|
|
|
|
@view_config(route_name='redefinir_mdp', renderer='../templates/default/redefinir_mdp.pt')
|
|
@view_config(route_name='init_mdp', renderer='../templates/default/redefinir_mdp.pt')
|
|
def redefinir_mdp(request):
|
|
if request.matched_route.name == 'redefinir_mdp':
|
|
lien = request.matchdict["lien"]
|
|
url = request.route_url('redefinir_mdp', lien=lien)
|
|
# tester si le champ "motdepasse_oublie" est encore valide
|
|
membre = get_member_by_mdp_oublie(request, lien)
|
|
else:
|
|
user = request.matchdict["user"]
|
|
lien = request.matchdict["lien"]
|
|
url = request.route_url('init_mdp', user=user, lien=lien)
|
|
# tester valeur OK ?
|
|
if lien == date.today().strftime('%d%m%Y'):
|
|
# oui, lire le membre
|
|
membre = get_member_by_id(request, user)
|
|
else:
|
|
membre = None
|
|
|
|
if membre:
|
|
if 'form.submitted' in request.params:
|
|
login = request.params["login"]
|
|
mdp = request.params["new_password1"]
|
|
if login == membre.CD_UTI:
|
|
update_membre_mdp(request, login, mdp)
|
|
request.session.flash("Votre mot de passe a été modifié avec succès.", 'success')
|
|
return HTTPFound(location=request.route_url('login'))
|
|
else:
|
|
request.session.flash("Identifiant incorrect.", 'danger')
|
|
return HTTPFound(location=request.route_url('login'))
|
|
else:
|
|
request.session.flash("Le lien n'est plus valable.", 'warning')
|
|
return HTTPFound(location=request.route_url('login'))
|
|
|
|
return {
|
|
'page_title': "Définissez votre mot de passe",
|
|
'url': url,
|
|
}
|
|
|
|
|
|
@view_config(route_name='login', renderer='../templates/default/login.pt', permission='view')
|
|
@view_config(route_name='login_as', renderer='../templates/default/login.pt', permission='view')
|
|
@forbidden_view_config(renderer='../templates/default/login.pt')
|
|
def login(request):
|
|
|
|
current_route_path = request.current_route_path()
|
|
login = ''
|
|
login_url = request.route_url('login')
|
|
|
|
referrer = request.url
|
|
if referrer == login_url:
|
|
referrer = '/' # never use the login form itself as came_from
|
|
|
|
came_from = request.params.get('came_from', referrer)
|
|
password = ''
|
|
message = ''
|
|
if 'form.submitted' in request.params:
|
|
login = request.params['login']
|
|
password = request.params['password']
|
|
record = get_member_by_id(request, login)
|
|
if record :
|
|
# mot de passe hash valide ?
|
|
if record.mdp == to_sha1(password) and record.actif == 1:
|
|
# get user agent string from request
|
|
ua_string = request.user_agent
|
|
user_agent = parse(ua_string)
|
|
update_last_connection(request, login, request.client_addr + ' - ' + str(user_agent))
|
|
|
|
# force le commit car il ne se fait pas automatiquement après l'update
|
|
transaction.commit()
|
|
|
|
headers = remember(request, login)
|
|
return HTTPFound(location=came_from, headers=headers)
|
|
|
|
message = "Email et mot de passe invalides. La connexion a échoué."
|
|
|
|
return {
|
|
'page_title': "",
|
|
'url': login_url,
|
|
'came_from': came_from,
|
|
'login': login,
|
|
'message': message,
|
|
}
|
|
|
|
|
|
@view_config(route_name='logout')
|
|
def logout(request):
|
|
request.session.invalidate()
|
|
headers = forget(request)
|
|
request.session.flash("Vous avez bien été déconnecté.")
|
|
return HTTPFound(location=request.route_url('login', login=''),
|
|
headers=headers)
|
|
|
|
|
|
@view_config(route_name='affiche_message', renderer='../templates/default/affiche_message.pt')
|
|
def affiche_message(request):
|
|
|
|
login = request.matchdict['login']
|
|
messages = request.session.pop_flash()
|
|
|
|
return {
|
|
'page_title': "Demande effectuée",
|
|
'login': login,
|
|
'messages' : messages,
|
|
'url_identification': request.route_url('login_as', login=login)
|
|
}
|
|
|
|
@view_config(route_name='ajax_codepostal')
|
|
def ajax_codepostal(request):
|
|
recherche = request.GET['recherche']
|
|
|
|
# lire les codes postaux commencant par
|
|
items = get_codespostaux(request, recherche)
|
|
liste=[]
|
|
for row in items:
|
|
d = row.code_postal + " - " + row.libelle
|
|
liste.append(d)
|
|
|
|
return Response(json.dumps(liste))
|
|
|
|
@view_config(route_name='ajax_lookup')
|
|
def ajax_lookup(request):
|
|
recherche = request.GET['recherche']
|
|
societe = recherche[:2] # 1er car.
|
|
name = recherche[2:]
|
|
|
|
# lire les chantiers
|
|
chantiers = get_chantiers_byName(request, societe, name)
|
|
liste=[]
|
|
for row in chantiers:
|
|
d = "%s | %s-%s"% (row.chantier, societe, row.numero)
|
|
liste.append(d)
|
|
|
|
return Response(json.dumps(liste))
|
|
|
|
@view_config(route_name='ajax_client')
|
|
def ajax_client(request):
|
|
recherche = request.GET['recherche']
|
|
societe = recherche[:2] # 1er car.
|
|
name = recherche[2:]
|
|
|
|
# lire les clients
|
|
clients = get_clients_byName(request, societe, name)
|
|
liste=[]
|
|
for row in clients:
|
|
d = "%s | %s-%s"% (row.NOM, societe, row.CD_CLI)
|
|
liste.append(d)
|
|
|
|
return Response(json.dumps(liste))
|
|
|
|
@view_config(route_name='ajax_texte')
|
|
def ajax_texte(request):
|
|
groupe = request.GET['groupe']
|
|
libelle = request.GET['libelle']
|
|
|
|
# import pdb;pdb.set_trace()
|
|
|
|
# lire les articles commencant par
|
|
items = get_article(request, 'LIB', groupe, libelle)
|
|
|
|
liste=[]
|
|
for row in items:
|
|
if groupe == 'TEXTE':
|
|
d = row.libelle
|
|
else:
|
|
d = '%s | %s | %s' % (row.ref, row.libelle, to_euro(row.prixht))
|
|
liste.append(d)
|
|
|
|
return Response(json.dumps(liste))
|
|
|
|
@view_config(route_name='ajax_article')
|
|
def ajax_article(request):
|
|
groupe = request.GET['groupe']
|
|
ref = request.GET['ref']
|
|
|
|
# lire l'article
|
|
items = get_article(request, 'REF', groupe, ref)
|
|
# puis retourne son libellé et son prixht
|
|
liste=[]
|
|
d = {}
|
|
d['ref'] = items.ref
|
|
d['libelle'] = items.libelle
|
|
d['prixht'] = "%.2f" % items.prixht
|
|
d['unite'] = items.unite
|
|
liste.append(d)
|
|
return Response(json.dumps(liste))
|