+@app.route('/admin/users')
+def admin_users():
+ if not session.get('user').get('is_admin'):
+ abort(401)
+ users = query_db('select *, roles.name as rolename from (select *, name as username from users join user_role on id=id_user order by id desc) join roles on id_role=roles.id')
+ # :TODO:maethor:20120530: Find a way to reduce the dict
+ return render_template('admin_users.html', users=users)
+
+@app.route('/admin/users/add', methods=['GET', 'POST'])
+def admin_user_add():
+ if not session.get('user').get('is_admin'):
+ abort(401)
+ if request.method == 'POST':
+ if request.form['email']:
+ # :TODO:maethor:120528: Check fields
+ password = "toto" # :TODO:maethor:120528: Generate password
+ admin = 0
+ if 'admin' in request.form.keys():
+ admin = 1
+ g.db.execute('insert into users (email, name, organization, password, is_admin) values (?, ?, ?, ?, ?)',
+ [request.form['email'], request.form['username'], request.form['organization'], password, admin])
+ g.db.commit()
+ user = query_db('select * from users where email = ?', [request.form["email"]], one=True)
+ if user:
+ for role in request.form.getlist('roles'):
+ # :TODO:maethor:120528: Check if this role exist
+ if query_db('select id from roles where id = ?', role, one=True) is None:
+ abort(401)
+ g.db.execute('insert into user_role values (?, ?)', [user['id'], role])
+ g.db.commit()
+ # :TODO:maethor:120528: Send mail
+ flash(u'Le nouvel utilisateur a été créé avec succès', 'success')
+ return redirect(url_for('admin_users'))
+ else:
+ flash(u'Une erreur s\'est produite.', 'error')
+ else:
+ flash(u"Vous devez spécifier une adresse email.", 'error')
+ groups = query_db('select * from roles where system=0')
+ return render_template('admin_user_new.html', groups=groups)
+
+#-------------
+# Roles admin
+
+@app.route('/admin/roles')
+def admin_roles():
+ if not session.get('user').get('is_admin'):
+ abort(401)
+ roles = query_db('select * from roles')
+ return render_template('admin_roles.html', roles=roles)
+
+@app.route('/admin/roles/add', methods=['POST'])
+def admin_role_add():
+ if not session.get('user').get('is_admin'):
+ abort(401)
+ if request.method == 'POST':
+ if request.form['name']:
+ g.db.execute('insert into roles (name) values (?)', [request.form['name']])
+ g.db.commit()
+ else:
+ flash(u"Vous devez spécifier un nom.", "error")
+ return redirect(url_for('admin_roles'))
+
+@app.route('/admin/roles/delete/<idrole>')
+def admin_role_del(idrole):
+ if not session.get('user').get('is_admin'):
+ abort(401)
+ role = query_db('select * from roles where id = ?', [idrole], one=True)
+ if role is None:
+ abort(404)
+ if role['system']:
+ abort(401)
+ g.db.execute('delete from roles where id = ?', [idrole])
+ g.db.commit()
+ return redirect(url_for('admin_roles'))