# ContentDB # Copyright (C) 2018-21 rubenwardy # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU Affero General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Affero General Public License for more details. # # You should have received a copy of the GNU Affero General Public License # along with this program. If not, see . from flask import * from flask_wtf import FlaskForm from flask_login import login_required from wtforms import * from wtforms.ext.sqlalchemy.fields import QuerySelectField from wtforms.validators import * from app.utils import * from . import bp class CreateScreenshotForm(FlaskForm): title = StringField("Title/Caption", [Optional(), Length(-1, 100)]) fileUpload = FileField("File Upload", [InputRequired()]) submit = SubmitField("Save") class EditScreenshotForm(FlaskForm): title = StringField("Title/Caption", [Optional(), Length(-1, 100)]) approved = BooleanField("Is Approved") submit = SubmitField("Save") class EditPackageScreenshotsForm(FlaskForm): cover_image = QuerySelectField("Cover Image", [DataRequired()], allow_blank=True, get_pk=lambda a: a.id, get_label=lambda a: a.title) submit = SubmitField("Save") @bp.route("/packages///screenshots/", methods=["GET", "POST"]) @login_required @is_package_page def screenshots(package): if not package.checkPerm(current_user, Permission.ADD_SCREENSHOTS): return redirect(package.getDetailsURL()) if package.screenshots.count() == 0: return redirect(package.getNewScreenshotURL()) form = EditPackageScreenshotsForm(obj=package) form.cover_image.query = package.screenshots if request.method == "POST": order = request.form.get("order") if order: lookup = {} for screenshot in package.screenshots: lookup[str(screenshot.id)] = screenshot counter = 1 for id in order.split(","): lookup[id].order = counter counter += 1 db.session.commit() return redirect(package.getDetailsURL()) if form.validate_on_submit(): form.populate_obj(package) db.session.commit() return render_template("packages/screenshots.html", package=package, form=form) @bp.route("/packages///screenshots/new/", methods=["GET", "POST"]) @login_required @is_package_page def create_screenshot(package): if not package.checkPerm(current_user, Permission.ADD_SCREENSHOTS): return redirect(package.getDetailsURL()) # Initial form class from post data and default data form = CreateScreenshotForm() if form.validate_on_submit(): uploadedUrl, uploadedPath = doFileUpload(form.fileUpload.data, "image", "a PNG or JPG image file") if uploadedUrl is not None: counter = 1 for screenshot in package.screenshots: screenshot.order = counter counter += 1 ss = PackageScreenshot() ss.package = package ss.title = form["title"].data or "Untitled" ss.url = uploadedUrl ss.approved = package.checkPerm(current_user, Permission.APPROVE_SCREENSHOT) ss.order = counter db.session.add(ss) msg = "Screenshot added {}" \ .format(ss.title) addNotification(package.maintainers, current_user, NotificationType.PACKAGE_EDIT, msg, package.getDetailsURL(), package) db.session.commit() return redirect(package.getEditScreenshotsURL()) return render_template("packages/screenshot_new.html", package=package, form=form) @bp.route("/packages///screenshots//edit/", methods=["GET", "POST"]) @login_required @is_package_page def edit_screenshot(package, id): screenshot = PackageScreenshot.query.get(id) if screenshot is None or screenshot.package != package: abort(404) canEdit = package.checkPerm(current_user, Permission.ADD_SCREENSHOTS) canApprove = package.checkPerm(current_user, Permission.APPROVE_SCREENSHOT) if not (canEdit or canApprove): return redirect(package.getEditScreenshotsURL()) # Initial form class from post data and default data form = EditScreenshotForm(obj=screenshot) if form.validate_on_submit(): wasApproved = screenshot.approved if canEdit: screenshot.title = form["title"].data or "Untitled" if canApprove: screenshot.approved = form["approved"].data else: screenshot.approved = wasApproved db.session.commit() return redirect(package.getEditScreenshotsURL()) return render_template("packages/screenshot_edit.html", package=package, screenshot=screenshot, form=form) @bp.route("/packages///screenshots//delete/", methods=["POST"]) @login_required @is_package_page def delete_screenshot(package, id): screenshot = PackageScreenshot.query.get(id) if screenshot is None or screenshot.package != package: abort(404) if not package.checkPerm(current_user, Permission.ADD_SCREENSHOTS): flash("Permission denied", "danger") return redirect(url_for("homepage.home")) if package.cover_image == screenshot: package.cover_image = None db.session.merge(package) db.session.delete(screenshot) db.session.commit() return redirect(package.getEditScreenshotsURL())