Changeset 7369 for main/waeup.sirp/trunk/src/waeup/sirp/students/browser.py

Timestamp:

18 Dec 2011, 08:24:04 (13 years ago)

Author:

Henrik Bettermann

Message:

Implement ChangePasswordRequestPage?.

Catch traceback, if student data are not complete and a test student presses the 'Book accommodation' button (regression test needed).

File:

• main/waeup.sirp/trunk/src/waeup/sirp/students/browser.py (modified) (7 diffs)

main/waeup.sirp/trunk/src/waeup/sirp/students/browser.py

@@ -26 +26 @@
 from zope.catalog.interfaces import ICatalog
 from zope.component import queryUtility, getUtility
+#from hurry.query import Eq
+#from hurry.query.query import Query
 from hurry.workflow.interfaces import IWorkflowInfo, IWorkflowState
 from zope.component import createObject
@@ -33 +35 @@
 from waeup.sirp.browser import (
     SIRPPage, SIRPEditFormPage, SIRPAddFormPage, SIRPDisplayFormPage,
-    ContactAdminForm)
+    ContactAdminForm, SIRPForm)
+from waeup.sirp.browser.interfaces import ICaptchaManager
 from waeup.sirp.browser.breadcrumbs import Breadcrumb
 from waeup.sirp.browser.resources import datepicker, datatable, tabs, warning
@@ -41 +44 @@
 from waeup.sirp.interfaces import (
     ISIRPObject, IUserAccount, IExtFileStore, IPasswordValidator, IContactForm,
-    ISIRPUtils)
+    ISIRPUtils, IUniversity)
 from waeup.sirp.widgets.datewidget import (
     FriendlyDateWidget, FriendlyDateDisplayWidget,
@@ -51 +54 @@
     IStudentAccommodation, IStudentClearanceEdit, IStudentStudyLevel,
     ICourseTicket, ICourseTicketAdd, IStudentPaymentsContainer,
-    IStudentOnlinePayment, IBedTicket, IStudentsUtils
+    IStudentOnlinePayment, IBedTicket, IStudentsUtils, IStudentChangePassword
     )
 from waeup.sirp.students.catalog import search
@@ -193 +196 @@
     grok.context(ISIRPObject)
     grok.name('setpassword')
-    grok.require('waeup.Public')
+    grok.require('waeup.Anonymous')
     grok.template('setpassword')
     title = ''
@@ -1469 +1472 @@
         students_utils = getUtility(IStudentsUtils)
         acc_details  = students_utils.getAccommodationDetails(student)
+        if not acc_details:
+            self.flash("Your data are incomplete.")
+            self.redirect(self.url(self.context))
+            return
         if not student.state in acc_details['allowed_states']:
             self.flash("You are in the wrong registration state.")
@@ -2186 +2193 @@
         self.redirect(self.url(self.context, u'@@edit'))
         return
+
+class ChangePasswordRequestPage(SIRPForm):
+    """Captcha'd page for students to request a password change.
+    """
+    grok.context(IUniversity)
+    grok.name('changepw')
+    grok.require('waeup.Anonymous')
+    grok.template('changepw')
+    title = 'Change Password Request'
+    label = 'Change my password'
+    form_fields = grok.AutoFields(IStudentChangePassword)
+
+    def update(self):
+        # Handle captcha
+        self.captcha = getUtility(ICaptchaManager).getCaptcha()
+        self.captcha_result = self.captcha.verify(self.request)
+        self.captcha_code = self.captcha.display(self.captcha_result.error_code)
+        return
+
+    @grok.action('Send request')
+    def request(self, **data):
+        if not self.captcha_result.is_valid:
+            # Captcha will display error messages automatically.
+            # No need to flash something.
+            return
+        # Search student
+        cat = queryUtility(ICatalog, name='students_catalog')
+        reg_number = data['reg_number']
+        email = data['email']
+        results = cat.searchResults(
+            reg_number=(reg_number, reg_number),
+            email=(email,email))
+        if len(results) == 0:
+            self.flash('No student record found.')
+            return
+        student = list(results)[0]
+        # Change password
+        sirp_utils = getUtility(ISIRPUtils)
+        pwd = sirp_utils.genPassword()
+        IUserAccount(student).setPassword(pwd)
+        # Send email with new redentials
+        username = student.student_id
+        fullname = student.display_fullname
+        subject = 'Your SIRP credentials'
+        msg = 'You have successfully changed your password for the'
+        email_to = student.email
+        login_url = self.url(grok.getSite(), 'login')
+        success = sirp_utils.sendPassword(fullname,msg,username,
+            pwd,login_url,email_to,subject)
+        if success:
+            self.flash('An email with your user name and password ' +
+                'has been sent to %s.' % email_to)
+        else:
+            self.flash('An smtp server error occurred.')
+        return