Mercurial > farol > farol
annotate farol/producttree.py @ 139:584587a000a2
Propagate ProductID and GroupID updates in the whole document
author | Benoît Allard <benoit.allard@greenbone.net> |
---|---|
date | Mon, 27 Oct 2014 15:08:29 +0100 |
parents | 64a6e69d54fc |
children | 1d63a532ccce |
rev | line source |
---|---|
0 | 1 # -*- encoding: utf-8 -*- |
2 # Description: | |
3 # Web stuff about the ProductTree | |
4 # | |
5 # Authors: | |
6 # BenoƮt Allard <benoit.allard@greenbone.net> | |
7 # | |
8 # Copyright: | |
9 # Copyright (C) 2014 Greenbone Networks GmbH | |
10 # | |
11 # This program is free software; you can redistribute it and/or | |
12 # modify it under the terms of the GNU General Public License | |
13 # as published by the Free Software Foundation; either version 2 | |
14 # of the License, or (at your option) any later version. | |
15 # | |
16 # This program is distributed in the hope that it will be useful, | |
17 # but WITHOUT ANY WARRANTY; without even the implied warranty of | |
18 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
19 # GNU General Public License for more details. | |
20 # | |
21 # You should have received a copy of the GNU General Public License | |
22 # along with this program; if not, write to the Free Software | |
23 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. | |
24 | |
25 """\ | |
26 Web-stuff about the producttree | |
27 """ | |
28 | |
29 from functools import wraps | |
30 | |
31 from flask import Blueprint, render_template, redirect, url_for, abort, request, flash | |
32 | |
33 from farolluz.cvrf import (CVRFProductBranch, CVRFFullProductName, | |
34 CVRFRelationship, CVRFGroup) | |
35 from .session import document_required, get_current | |
36 | |
37 producttree = Blueprint('producttree', __name__) | |
38 | |
39 def producttree_required(f): | |
40 @wraps(f) | |
41 def decorated_function(*args, **kwargs): | |
42 if get_current()._producttree is None: | |
43 flash('Operation invalid without producttree', 'warning') | |
22
dbfe89e3c6fe
Fix producttree urls
Benoît Allard <benoit.allard@greenbone.net>
parents:
0
diff
changeset
|
44 return redirect(url_for('document.view')) |
0 | 45 return f(*args, **kwargs) |
46 return decorated_function | |
47 | |
48 @producttree.route('/create', methods=['POST']) | |
49 @document_required | |
50 def create(): | |
51 get_current().createProductTree() | |
45
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
52 return redirect(url_for('.view')) |
0 | 53 |
45
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
54 @producttree.route('/') |
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
55 @document_required |
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
56 @producttree_required |
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
57 def view(): |
86
2d41121ec991
Fix issue when relation are defined
Benoît Allard <benoit.allard@greenbone.net>
parents:
85
diff
changeset
|
58 cvrf = get_current() |
45
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
59 return render_template('producttree/view.j2', |
86
2d41121ec991
Fix issue when relation are defined
Benoît Allard <benoit.allard@greenbone.net>
parents:
85
diff
changeset
|
60 producttree=cvrf._producttree, cvrf=cvrf) |
0 | 61 |
99
0b9f19f51d79
Add deletion of the whole Product Tree
Benoît Allard <benoit.allard@greenbone.net>
parents:
88
diff
changeset
|
62 @producttree.route('/delete', methods=['POST']) |
0b9f19f51d79
Add deletion of the whole Product Tree
Benoît Allard <benoit.allard@greenbone.net>
parents:
88
diff
changeset
|
63 @producttree_required |
0b9f19f51d79
Add deletion of the whole Product Tree
Benoît Allard <benoit.allard@greenbone.net>
parents:
88
diff
changeset
|
64 def delete(): |
135
5e9237340630
Add server-side check before deleting a producttree element.
Benoît Allard <benoit.allard@greenbone.net>
parents:
106
diff
changeset
|
65 if not cvrf.isProductTreeOrphan(): |
5e9237340630
Add server-side check before deleting a producttree element.
Benoît Allard <benoit.allard@greenbone.net>
parents:
106
diff
changeset
|
66 flash('Not deleting the Product Tree, some Products are mentionned in the document', 'danger') |
5e9237340630
Add server-side check before deleting a producttree element.
Benoît Allard <benoit.allard@greenbone.net>
parents:
106
diff
changeset
|
67 return redirect(url_for('.view')) |
99
0b9f19f51d79
Add deletion of the whole Product Tree
Benoît Allard <benoit.allard@greenbone.net>
parents:
88
diff
changeset
|
68 get_current()._producttree = None |
0b9f19f51d79
Add deletion of the whole Product Tree
Benoît Allard <benoit.allard@greenbone.net>
parents:
88
diff
changeset
|
69 return redirect(url_for('document.view')) |
0b9f19f51d79
Add deletion of the whole Product Tree
Benoît Allard <benoit.allard@greenbone.net>
parents:
88
diff
changeset
|
70 |
0 | 71 @producttree.route('/branch/<path:path>/edit', methods=['GET', 'POST']) |
72 @document_required | |
73 @producttree_required | |
74 def edit_branch(path): | |
75 path = [int(p) for p in path.split('/')] | |
76 cvrf = get_current() | |
77 ptree = cvrf._producttree | |
78
264d4579f6bf
More input validation
Benoît Allard <benoit.allard@greenbone.net>
parents:
62
diff
changeset
|
78 try: branch = cvrf._producttree.getBranch(path) |
264d4579f6bf
More input validation
Benoît Allard <benoit.allard@greenbone.net>
parents:
62
diff
changeset
|
79 except (ValueError, IndexError): abort(404) |
0 | 80 if request.method != 'POST': |
81 branches = [('', '')] + [(b.getName(), b.getPath(True)) for b in ptree.getNotTerminalBranches(branch)] | |
85
b6a48669edb8
Don't create a branch only to have empty name
Benoît Allard <benoit.allard@greenbone.net>
parents:
84
diff
changeset
|
82 return render_template('producttree/edit_branch.j2', |
b6a48669edb8
Don't create a branch only to have empty name
Benoît Allard <benoit.allard@greenbone.net>
parents:
84
diff
changeset
|
83 _type=branch._type, name=branch._name, parentpath=branch.getParentPath(), |
b6a48669edb8
Don't create a branch only to have empty name
Benoît Allard <benoit.allard@greenbone.net>
parents:
84
diff
changeset
|
84 branches=branches, types=branch.TYPES) |
0 | 85 |
86 pbranch = ptree | |
87 if request.form['parent']: | |
78
264d4579f6bf
More input validation
Benoît Allard <benoit.allard@greenbone.net>
parents:
62
diff
changeset
|
88 try: pbranch = ptree.getBranch([int(p) for p in request.form['parent'].split('/')]) |
264d4579f6bf
More input validation
Benoît Allard <benoit.allard@greenbone.net>
parents:
62
diff
changeset
|
89 except (ValueError, IndexError): abort(404) |
0 | 90 |
91 if pbranch is not branch.getParent(): | |
92 # We have to 're-link' the element ... | |
93 # 1. unlink | |
94 branch.unlink() | |
95 # 2. set the new parent | |
82
d6fa288e92a7
Update to latest farolluz (unlink/link)
Benoît Allard <benoit.allard@greenbone.net>
parents:
80
diff
changeset
|
96 branch.link(pbranch) |
0 | 97 |
98 branch._type = request.form['type'] | |
99 branch._name = request.form['name'] | |
45
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
100 return redirect(url_for('.view')) |
0 | 101 |
102 @producttree.route('/branch/add', methods=['GET', 'POST']) | |
103 @document_required | |
104 @producttree_required | |
105 def add_branch(): | |
106 cvrf = get_current() | |
107 ptree = cvrf._producttree | |
108 if request.method != 'POST': | |
109 branches = [('', '')] + [(b.getName(), b.getPath(True)) for b in ptree.getNotTerminalBranches()] | |
85
b6a48669edb8
Don't create a branch only to have empty name
Benoît Allard <benoit.allard@greenbone.net>
parents:
84
diff
changeset
|
110 return render_template('producttree/edit_branch.j2', |
b6a48669edb8
Don't create a branch only to have empty name
Benoît Allard <benoit.allard@greenbone.net>
parents:
84
diff
changeset
|
111 action='Add', |
b6a48669edb8
Don't create a branch only to have empty name
Benoît Allard <benoit.allard@greenbone.net>
parents:
84
diff
changeset
|
112 branches=branches, types=CVRFProductBranch.TYPES) |
0 | 113 |
114 pbranch = ptree | |
115 if request.form['parent']: | |
78
264d4579f6bf
More input validation
Benoît Allard <benoit.allard@greenbone.net>
parents:
62
diff
changeset
|
116 try: pbranch = ptree.getBranch([int(p) for p in request.form['parent'].split('/')]) |
264d4579f6bf
More input validation
Benoît Allard <benoit.allard@greenbone.net>
parents:
62
diff
changeset
|
117 except (ValueError, IndexError): abort(404) |
0 | 118 branch = CVRFProductBranch(request.form['type'], request.form['name'], pbranch) |
45
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
119 return redirect(url_for('.view')) |
0 | 120 |
80
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
121 @producttree.route('/branch/<path:path>/del', methods=['POST']) |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
122 @document_required |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
123 @producttree_required |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
124 def del_branch(path): |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
125 path = [int(p) for p in path.split('/')] |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
126 cvrf = get_current() |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
127 ptree = cvrf._producttree |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
128 try: branch = cvrf._producttree.getBranch(path) |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
129 except (ValueError, IndexError): |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
130 flash('Cannot find Branch', 'danger') |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
131 abort(404) |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
132 if branch._childs: |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
133 flash('Cannot delete a branch with childs', 'danger') |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
134 abort(403) |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
135 branch.unlink() |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
136 del branch |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
137 return redirect(url_for('.view')) |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
138 |
c00f20bd90ba
Allow deletion of (orphaned) Branches
Benoît Allard <benoit.allard@greenbone.net>
parents:
78
diff
changeset
|
139 |
0 | 140 @producttree.route('/product/<productid>') |
141 @document_required | |
142 @producttree_required | |
143 def view_product(productid): | |
144 cvrf = get_current() | |
145 try: | |
146 product = cvrf.getProductForID(productid) | |
136
64a6e69d54fc
Fix an issue where the Wrong Exception was being caught.
Benoît Allard <benoit.allard@greenbone.net>
parents:
135
diff
changeset
|
147 except KeyError: |
0 | 148 abort(404) |
106
4ea7966dcc99
Show where a Product is referenced in the Document.
Benoît Allard <benoit.allard@greenbone.net>
parents:
99
diff
changeset
|
149 return render_template('producttree/view_product.j2', |
4ea7966dcc99
Show where a Product is referenced in the Document.
Benoît Allard <benoit.allard@greenbone.net>
parents:
99
diff
changeset
|
150 product=product, groups=[g for g in cvrf._producttree._groups if productid in g._productids], |
4ea7966dcc99
Show where a Product is referenced in the Document.
Benoît Allard <benoit.allard@greenbone.net>
parents:
99
diff
changeset
|
151 cvrf=cvrf) |
0 | 152 |
153 @producttree.route('/product/<productid>/edit', methods=['GET', 'POST']) | |
154 @document_required | |
155 @producttree_required | |
156 def edit_product(productid): | |
157 cvrf = get_current() | |
158 ptree = cvrf._producttree | |
159 try: | |
160 product = cvrf.getProductForID(productid) | |
161 except KeyError: | |
162 abort(404) | |
163 | |
164 if request.method != 'POST': | |
165 current_rel = '' | |
166 if product.isRelationship(): | |
167 current_rel = str(ptree._relationships.index(product.getCurrentRelationship())) | |
168 leaves = [('', '')] + [(b.getName(), b.getPath(True)) for b in ptree.getOrphanedBranches(product)] | |
169 rels = [('', '')] + [(ptree.getNameOfRelationship(r), str(i)) for i, r in ptree.getOrphanedRelationships(product)] | |
170 return render_template('producttree/edit_product.j2', product=product, action='Update', orphaned_leaves=leaves, orphaned_relationships=rels, current_rel=current_rel) | |
171 | |
172 if request.form['parent_branch'] and request.form['parent_relationship']: | |
173 flash('Cannot set a parent branch and parent relationship', 'danger') | |
174 return redirect(url_for('.edit_product', productid=productid)) | |
175 | |
176 oldp = product._parent | |
177 if request.form['parent_branch']: | |
78
264d4579f6bf
More input validation
Benoît Allard <benoit.allard@greenbone.net>
parents:
62
diff
changeset
|
178 try: pbranch = ptree.getBranch([int(p) for p in request.form['parent_branch'].split('/')]) |
264d4579f6bf
More input validation
Benoît Allard <benoit.allard@greenbone.net>
parents:
62
diff
changeset
|
179 except (ValueError, IndexError): abort(404) |
0 | 180 if pbranch is not oldp: |
181 # Gonna be funny, needs re-link | |
182 product.unlink() | |
82
d6fa288e92a7
Update to latest farolluz (unlink/link)
Benoît Allard <benoit.allard@greenbone.net>
parents:
80
diff
changeset
|
183 # And Link again |
d6fa288e92a7
Update to latest farolluz (unlink/link)
Benoît Allard <benoit.allard@greenbone.net>
parents:
80
diff
changeset
|
184 product.link(pbranch) |
0 | 185 elif request.form['parent_relationship']: |
186 prel = ptree._relationships[int(request.form['parent_relationship'])] | |
187 if prel is not oldp: | |
82
d6fa288e92a7
Update to latest farolluz (unlink/link)
Benoît Allard <benoit.allard@greenbone.net>
parents:
80
diff
changeset
|
188 # Unlink |
0 | 189 product.unlink() |
82
d6fa288e92a7
Update to latest farolluz (unlink/link)
Benoît Allard <benoit.allard@greenbone.net>
parents:
80
diff
changeset
|
190 # Link again |
d6fa288e92a7
Update to latest farolluz (unlink/link)
Benoît Allard <benoit.allard@greenbone.net>
parents:
80
diff
changeset
|
191 product.link(prel) |
0 | 192 else: |
193 if ptree is not oldp: | |
82
d6fa288e92a7
Update to latest farolluz (unlink/link)
Benoît Allard <benoit.allard@greenbone.net>
parents:
80
diff
changeset
|
194 # Unlink |
0 | 195 product.unlink() |
82
d6fa288e92a7
Update to latest farolluz (unlink/link)
Benoît Allard <benoit.allard@greenbone.net>
parents:
80
diff
changeset
|
196 # Link again |
d6fa288e92a7
Update to latest farolluz (unlink/link)
Benoît Allard <benoit.allard@greenbone.net>
parents:
80
diff
changeset
|
197 product.link(ptree) |
0 | 198 |
139
584587a000a2
Propagate ProductID and GroupID updates in the whole document
Benoît Allard <benoit.allard@greenbone.net>
parents:
136
diff
changeset
|
199 if (request.form['productid'] != product._productid) and not cvrf.isProductOrphan(product._productid): |
584587a000a2
Propagate ProductID and GroupID updates in the whole document
Benoît Allard <benoit.allard@greenbone.net>
parents:
136
diff
changeset
|
200 flash('Also updating the ProductID for %s in this Document' % request.form['name'], 'info') |
584587a000a2
Propagate ProductID and GroupID updates in the whole document
Benoît Allard <benoit.allard@greenbone.net>
parents:
136
diff
changeset
|
201 cvrf.changeProductID(product._productid, request.form['productid']) |
0 | 202 product._productid = request.form['productid'] |
203 product._name = request.form['name'] | |
204 product._cpe = request.form['cpe'] or None | |
45
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
205 return redirect(url_for('.view')) |
0 | 206 |
207 @producttree.route('/product/add', methods=['GET', 'POST']) | |
208 @document_required | |
209 @producttree_required | |
210 def add_product(): | |
211 cvrf = get_current() | |
212 ptree = cvrf._producttree | |
213 | |
214 if request.method != 'POST': | |
215 product=CVRFFullProductName('', '', ptree) | |
216 leaves = [('', '')] + [(b.getName(), b.getPath(True)) for b in ptree.getOrphanedBranches()] | |
217 rels = [('', '')] + [(ptree.getNameOfRelationship(r), str(i)) for i, r in ptree.getOrphanedRelationships()] | |
218 return render_template('producttree/edit_product.j2', product=product, action='Add', orphaned_leaves=leaves, orphaned_relationships=rels, current_rel='') | |
219 | |
220 if request.form['parent_branch'] and request.form['parent_relationship']: | |
221 flash('Cannot set a parent branch and parent relationship', 'danger') | |
62
ce49bd1512dd
Make pyflafes a happier
Benoît Allard <benoit.allard@greenbone.net>
parents:
45
diff
changeset
|
222 return redirect(url_for('.add_product')) |
0 | 223 |
224 parent = ptree | |
225 if request.form['parent_branch']: | |
83
2ecf13200e87
Fix issue from a previous commit
Benoît Allard <benoit.allard@greenbone.net>
parents:
82
diff
changeset
|
226 try: parent = ptree.getBranch([int(p) for p in request.form['parent_branch'].split('/')]) |
78
264d4579f6bf
More input validation
Benoît Allard <benoit.allard@greenbone.net>
parents:
62
diff
changeset
|
227 except (ValueError, IndexError): abort(404) |
0 | 228 elif request.form['parent_relationship']: |
229 parent = ptree._relationships[int(request.form['parent_relationship'])] | |
230 | |
231 product = CVRFFullProductName(request.form['productid'], request.form['name'], parent, request.form['cpe'] or None) | |
232 ptree.addProduct(product) | |
45
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
233 return redirect(url_for('.view')) |
0 | 234 |
84
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
235 @producttree.route('/product/<productid>/del', methods=['POST']) |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
236 @document_required |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
237 @producttree_required |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
238 def del_product(productid): |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
239 cvrf = get_current() |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
240 ptree = cvrf._producttree |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
241 try: |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
242 product = cvrf.getProductForID(productid) |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
243 except KeyError: |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
244 abort(404) |
135
5e9237340630
Add server-side check before deleting a producttree element.
Benoît Allard <benoit.allard@greenbone.net>
parents:
106
diff
changeset
|
245 if not cvrf.isProductOrphan(product._productid): |
5e9237340630
Add server-side check before deleting a producttree element.
Benoît Allard <benoit.allard@greenbone.net>
parents:
106
diff
changeset
|
246 flash('Not deleting the Product, it is used in the Document.', 'danger') |
5e9237340630
Add server-side check before deleting a producttree element.
Benoît Allard <benoit.allard@greenbone.net>
parents:
106
diff
changeset
|
247 return redirect(url_for('.view_product', productid=product._productid)) |
84
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
248 product.unlink() |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
249 ptree._products.remove(product) |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
250 del product |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
251 return redirect(url_for('.view')) |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
252 |
cc836f9e869e
Allow deletion of Products
Benoît Allard <benoit.allard@greenbone.net>
parents:
83
diff
changeset
|
253 |
0 | 254 @producttree.route('/relationship/<int:index>/edit', methods=['GET', 'POST']) |
255 @document_required | |
256 @producttree_required | |
257 def edit_relationship(index): | |
258 cvrf = get_current() | |
259 ptree = cvrf._producttree | |
260 try: | |
261 rel = ptree._relationships[index] | |
262 except IndexError: | |
263 abort(404) | |
264 | |
265 if request.method != 'POST': | |
266 return render_template('producttree/edit_relationship.j2', productreference=rel._productreference, relationtype=rel._relationtype, relatestoproductreference=rel._relatestoproductreference, types=rel.TYPES) | |
267 | |
268 rel._productreference = request.form['productreference'] | |
269 rel._relationtype = request.form['relationtype'] | |
270 rel._relatestoproductreference = request.form['relatestoproductreference'] | |
45
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
271 return redirect(url_for('.view')) |
0 | 272 |
273 @producttree.route('/relationship/add', methods=['GET', 'POST']) | |
274 @document_required | |
275 @producttree_required | |
276 def add_relationship(): | |
277 cvrf = get_current() | |
278 ptree = cvrf._producttree | |
279 if len(ptree._products) < 2: | |
280 flash('You need to have at least two products to create a relationship', 'warning') | |
281 return redirect(url_for('.add_product')) | |
282 | |
283 if request.method != 'POST': | |
284 return render_template('producttree/edit_relationship.j2', action='Add', types=CVRFRelationship.TYPES) | |
285 | |
286 prodid1 = request.form['productreference'] | |
287 prodid2 = request.form['relatestoproductreference'] | |
288 | |
289 if prodid1 == prodid2: | |
290 flash('You cannot create a relationship with the same product twice', 'danger') | |
291 return redirect(url_for('.add_relationship')) | |
292 | |
293 rel = CVRFRelationship(prodid1, request.form['relationtype'], prodid2) | |
294 ptree.addRelationship(rel) | |
45
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
295 return redirect(url_for('.view')) |
0 | 296 |
87
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
297 @producttree.route('/relationship/<int:index>/del', methods=['POST']) |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
298 @document_required |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
299 @producttree_required |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
300 def del_relationship(index): |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
301 rels = get_current()._producttree._relationships |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
302 if not (0 <= index < len(rels)): |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
303 flash('Relationship not found', 'danger') |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
304 abort(404) |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
305 rel = rels[index] |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
306 |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
307 if not rel.isOrphaned(): |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
308 flash('Not able to delete Relationship with Product', 'danger') |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
309 abort(403) |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
310 |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
311 del rels[index] |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
312 return redirect(url_for('.view')) |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
313 |
e02724c84bae
Add deletion of (orphaned) relationships
Benoît Allard <benoit.allard@greenbone.net>
parents:
86
diff
changeset
|
314 |
0 | 315 @producttree.route('/group/<groupid>/edit', methods=['GET', 'POST']) |
316 @document_required | |
317 @producttree_required | |
318 def edit_group(groupid): | |
139
584587a000a2
Propagate ProductID and GroupID updates in the whole document
Benoît Allard <benoit.allard@greenbone.net>
parents:
136
diff
changeset
|
319 cvrf = get_current() |
0 | 320 try: |
139
584587a000a2
Propagate ProductID and GroupID updates in the whole document
Benoît Allard <benoit.allard@greenbone.net>
parents:
136
diff
changeset
|
321 group = cvrf.getGroupForID(groupid) |
0 | 322 except KeyError: |
323 abort(404) | |
324 if request.method != 'POST': | |
325 return render_template('producttree/edit_group.j2', groupid=group._groupid, description=group._description, productids=group._productids) | |
326 | |
139
584587a000a2
Propagate ProductID and GroupID updates in the whole document
Benoît Allard <benoit.allard@greenbone.net>
parents:
136
diff
changeset
|
327 if (request.form['groupid'] != group._groupid) and not cvrf.isGroupOrphan(group._groupid): |
584587a000a2
Propagate ProductID and GroupID updates in the whole document
Benoît Allard <benoit.allard@greenbone.net>
parents:
136
diff
changeset
|
328 flash('Also updating the groupid in the whole document.', 'info') |
584587a000a2
Propagate ProductID and GroupID updates in the whole document
Benoît Allard <benoit.allard@greenbone.net>
parents:
136
diff
changeset
|
329 cvrf.changeGroupID(group._groupid, request.form['groupid']) |
0 | 330 group._groupid = request.form['groupid'] |
331 group.setDescription(request.form['description'] or None) | |
332 group._productids = [] | |
333 for productid in request.form.getlist('products'): | |
334 group.addProductID(productid) | |
45
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
335 return redirect(url_for('.view')) |
0 | 336 |
337 @producttree.route('/group/add', methods=['GET', 'POST']) | |
338 @document_required | |
339 @producttree_required | |
340 def add_group(): | |
341 if request.method != 'POST': | |
342 return render_template('producttree/edit_group.j2', action='Add') | |
343 | |
344 group = CVRFGroup(request.form['groupid']) | |
345 group.setDescription(request.form['description'] or None) | |
346 for productid in request.form.getlist('products'): | |
347 group.addProductID(productid) | |
348 get_current()._producttree.addGroup(group) | |
45
7c4d001839e7
Move the Display of the ProductTree to its own page
Benoît Allard <benoit.allard@greenbone.net>
parents:
22
diff
changeset
|
349 return redirect(url_for('.view')) |
88
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
350 |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
351 @producttree.route('/group/<groupid>/del', methods=['POST']) |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
352 @document_required |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
353 @producttree_required |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
354 def del_group(groupid): |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
355 cvrf = get_current() |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
356 try: |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
357 group = get_current().getGroupForID(groupid) |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
358 except KeyError: |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
359 flash('Group not found', 'danger') |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
360 abort(404) |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
361 |
135
5e9237340630
Add server-side check before deleting a producttree element.
Benoît Allard <benoit.allard@greenbone.net>
parents:
106
diff
changeset
|
362 if not cvrf.isGroupOrphan(group._groupid): |
5e9237340630
Add server-side check before deleting a producttree element.
Benoît Allard <benoit.allard@greenbone.net>
parents:
106
diff
changeset
|
363 flash('Not deleting group, it is mentionned in the document.', 'danger') |
5e9237340630
Add server-side check before deleting a producttree element.
Benoît Allard <benoit.allard@greenbone.net>
parents:
106
diff
changeset
|
364 return redirect(url_for('.view')) |
5e9237340630
Add server-side check before deleting a producttree element.
Benoît Allard <benoit.allard@greenbone.net>
parents:
106
diff
changeset
|
365 |
88
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
366 cvrf._producttree._groups.remove(group) |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
367 return redirect(url_for('.view')) |
521c0ec35338
Add deletion of Groups
Benoît Allard <benoit.allard@greenbone.net>
parents:
87
diff
changeset
|
368 |