# ContentDB # Copyright (C) 2018-21 rubenwardy # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU Affero General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Affero General Public License for more details. # # You should have received a copy of the GNU Affero General Public License # along with this program. If not, see . from flask import * from flask_login import current_user, login_required from flask_wtf import FlaskForm from wtforms import * from wtforms.validators import * from app.models import * from . import bp @bp.route("/tags/") @login_required def tag_list(): if not Permission.EDIT_TAGS.check(current_user): abort(403) query = Tag.query if request.args.get("sort") == "views": query = query.order_by(db.desc(Tag.views)) else: query = query.order_by(db.asc(Tag.title)) return render_template("admin/tags/list.html", tags=query.all()) class TagForm(FlaskForm): title = StringField("Title", [InputRequired(), Length(3,100)]) description = TextAreaField("Description", [Optional(), Length(0, 500)]) name = StringField("Name", [Optional(), Length(1, 20), Regexp("^[a-z0-9_]", 0, "Lower case letters (a-z), digits (0-9), and underscores (_) only")]) submit = SubmitField("Save") @bp.route("/tags/new/", methods=["GET", "POST"]) @bp.route("/tags//edit/", methods=["GET", "POST"]) @login_required def create_edit_tag(name=None): tag = None if name is not None: tag = Tag.query.filter_by(name=name).first() if tag is None: abort(404) if not Permission.checkPerm(current_user, Permission.EDIT_TAGS if tag else Permission.CREATE_TAG): abort(403) form = TagForm(formdata=request.form, obj=tag) if form.validate_on_submit(): if tag is None: tag = Tag(form.title.data) tag.description = form.description.data db.session.add(tag) else: form.populate_obj(tag) db.session.commit() if Permission.EDIT_TAGS.check(current_user): return redirect(url_for("admin.create_edit_tag", name=tag.name)) else: return redirect(url_for("homepage.home")) return render_template("admin/tags/edit.html", tag=tag, form=form)