]> git.lizzy.rs Git - cheatdb.git/blobdiff - app/models.py
Remove admin from being able to edit any comment
[cheatdb.git] / app / models.py
index 80f6fea76386bbd30613aea16aac1a8fbac85d5d..58cf99201978476a325a8680875bc0cdef505eb5 100644 (file)
@@ -84,12 +84,16 @@ class Permission(enum.Enum):
        APPROVE_RELEASE    = "APPROVE_RELEASE"
        APPROVE_NEW        = "APPROVE_NEW"
        CHANGE_RELEASE_URL = "CHANGE_RELEASE_URL"
-       CHANGE_DNAME       = "CHANGE_DNAME"
+       CHANGE_USERNAMES   = "CHANGE_USERNAMES"
        CHANGE_RANK        = "CHANGE_RANK"
        CHANGE_EMAIL       = "CHANGE_EMAIL"
        EDIT_EDITREQUEST   = "EDIT_EDITREQUEST"
        SEE_THREAD         = "SEE_THREAD"
        CREATE_THREAD      = "CREATE_THREAD"
+       COMMENT_THREAD     = "COMMENT_THREAD"
+       LOCK_THREAD        = "LOCK_THREAD"
+       DELETE_REPLY       = "DELETE_REPLY"
+       EDIT_REPLY         = "EDIT_REPLY"
        UNAPPROVE_PACKAGE  = "UNAPPROVE_PACKAGE"
        TOPIC_DISCARD      = "TOPIC_DISCARD"
        CREATE_TOKEN       = "CREATE_TOKEN"
@@ -192,7 +196,7 @@ class User(db.Model, UserMixin):
                # Members can edit their own packages, and editors can edit any packages
                if perm == Permission.CHANGE_AUTHOR:
                        return user.rank.atLeast(UserRank.EDITOR)
-               elif perm == Permission.CHANGE_RANK or perm == Permission.CHANGE_DNAME:
+               elif perm == Permission.CHANGE_RANK or perm == Permission.CHANGE_USERNAMES:
                        return user.rank.atLeast(UserRank.MODERATOR)
                elif perm == Permission.CHANGE_EMAIL or perm == Permission.CHANGE_PROFILE_URLS:
                        return user == self or (user.rank.atLeast(UserRank.MODERATOR) and user.rank.atLeast(self.rank))
@@ -205,9 +209,17 @@ class User(db.Model, UserMixin):
                        raise Exception("Permission {} is not related to users".format(perm.name))
 
        def canCommentRL(self):
+               one_min_ago = datetime.datetime.utcnow() - datetime.timedelta(minutes=1)
+               if ThreadReply.query.filter_by(author=self) \
+                               .filter(ThreadReply.created_at > one_min_ago).count() >= 3:
+                       return False
+
                hour_ago = datetime.datetime.utcnow() - datetime.timedelta(hours=1)
-               return ThreadReply.query.filter_by(author=self) \
-                       .filter(ThreadReply.created_at > hour_ago).count() < 4
+               if ThreadReply.query.filter_by(author=self) \
+                               .filter(ThreadReply.created_at > hour_ago).count() >= 20:
+                       return False
+
+               return True
 
        def canOpenThreadRL(self):
                hour_ago = datetime.datetime.utcnow() - datetime.timedelta(hours=1)
@@ -232,23 +244,31 @@ class UserEmailVerification(db.Model):
        user    = db.relationship("User", foreign_keys=[user_id])
 
 class Notification(db.Model):
-       id        = db.Column(db.Integer, primary_key=True)
-       user_id   = db.Column(db.Integer, db.ForeignKey("user.id"))
-       causer_id = db.Column(db.Integer, db.ForeignKey("user.id"))
-       user      = db.relationship("User", foreign_keys=[user_id])
-       causer    = db.relationship("User", foreign_keys=[causer_id])
+       id         = db.Column(db.Integer, primary_key=True)
+
+       user_id    = db.Column(db.Integer, db.ForeignKey("user.id"), nullable=False)
+       user       = db.relationship("User", foreign_keys=[user_id])
+
+       causer_id  = db.Column(db.Integer, db.ForeignKey("user.id"), nullable=False)
+       causer     = db.relationship("User", foreign_keys=[causer_id])
+
+       title      = db.Column(db.String(100), nullable=False)
+       url        = db.Column(db.String(200), nullable=True)
+
+       package_id = db.Column(db.Integer, db.ForeignKey("package.id"), nullable=True)
+       package    = db.relationship("Package", foreign_keys=[package_id])
 
-       title     = db.Column(db.String(100), nullable=False)
-       url       = db.Column(db.String(200), nullable=True)
+       created_at = db.Column(db.DateTime, nullable=True, default=datetime.datetime.utcnow)
 
-       def __init__(self, us, cau, titl, ur):
-               if len(titl) > 100:
+       def __init__(self, user, causer, title, url, package=None):
+               if len(title) > 100:
                        title = title[:99] + "…"
 
-               self.user   = us
-               self.causer = cau
-               self.title  = titl
-               self.url    = ur
+               self.user    = user
+               self.causer  = causer
+               self.title   = title
+               self.url     = url
+               self.package = package
 
 
 class License(db.Model):
@@ -651,6 +671,10 @@ class Package(db.Model):
                return url_for("packages.remove_self_maintainers",
                                author=self.author.username, name=self.name)
 
+       def getReviewURL(self):
+               return url_for('packages.review',
+                               author=self.author.username, name=self.name)
+
        def getDownloadRelease(self, version=None):
                for rel in self.releases:
                        if rel.approved and (version is None or
@@ -696,36 +720,28 @@ class Package(db.Model):
                elif perm == Permission.EDIT_MAINTAINERS:
                        return isOwner or user.rank.atLeast(UserRank.MODERATOR)
 
-               # Moderators can delete packages
-               elif perm == Permission.DELETE_PACKAGE or perm == Permission.UNAPPROVE_PACKAGE \
-                               or perm == Permission.CHANGE_RELEASE_URL:
+               elif perm == Permission.UNAPPROVE_PACKAGE or perm == Permission.DELETE_PACKAGE:
+                       return user.rank.atLeast(UserRank.EDITOR)
+
+               elif perm == Permission.CHANGE_RELEASE_URL:
                        return user.rank.atLeast(UserRank.MODERATOR)
 
                else:
                        raise Exception("Permission {} is not related to packages".format(perm.name))
 
-       def setStartScore(self):
-               downloads = self.downloads
-
-               forum_score = 0
-               forum_bonus = 0
-               topic = self.forums and ForumTopic.query.get(self.forums)
-               if topic:
-                       months = (datetime.datetime.now() - topic.created_at).days / 30
-                       years  = months / 12
-                       forum_score = topic.views / max(years, 0.0416) + 80*min(max(months, 0.5), 6)
-                       forum_bonus = topic.views + topic.posts
-
-               self.score = max(downloads, forum_score * 0.6) + forum_bonus
-
-               if self.getMainScreenshotURL() is None:
-                       self.score *= 0.8
-
-               self.recalcScore()
+       def getScoreDict(self):
+               return {
+                       "author": self.author.username,
+                       "name": self.name,
+                       "score": self.score,
+                       "score_downloads": self.score_downloads,
+                       "score_reviews": self.score - self.score_downloads,
+                       "downloads": self.downloads
+               }
 
        def recalcScore(self):
-               self.score_downloads = self.score
-
+               review_scores = [ 100 * r.asSign() for r in self.reviews ]
+               self.score = self.score_downloads + sum(review_scores)
 
 
 class MetaPackage(db.Model):
@@ -1063,9 +1079,14 @@ class Thread(db.Model):
        package_id = db.Column(db.Integer, db.ForeignKey("package.id"), nullable=True)
        package    = db.relationship("Package", foreign_keys=[package_id])
 
+       review_id  = db.Column(db.Integer, db.ForeignKey("package_review.id"), nullable=True)
+       review     = db.relationship("PackageReview", foreign_keys=[review_id])
+
        author_id  = db.Column(db.Integer, db.ForeignKey("user.id"), nullable=False)
        title      = db.Column(db.String(100), nullable=False)
-       private    = db.Column(db.Boolean, server_default="0")
+       private    = db.Column(db.Boolean, server_default="0", nullable=False)
+
+       locked     = db.Column(db.Boolean, server_default="0", nullable=False)
 
        created_at = db.Column(db.DateTime, nullable=False, default=datetime.datetime.utcnow)
 
@@ -1074,18 +1095,18 @@ class Thread(db.Model):
        watchers   = db.relationship("User", secondary=watchers, lazy="subquery", \
                                                backref=db.backref("watching", lazy=True))
 
+       def getViewURL(self):
+               return url_for("threads.view", id=self.id)
 
        def getSubscribeURL(self):
-               return url_for("threads.subscribe",
-                               id=self.id)
+               return url_for("threads.subscribe", id=self.id)
 
        def getUnsubscribeURL(self):
-               return url_for("threads.unsubscribe",
-                               id=self.id)
+               return url_for("threads.unsubscribe", id=self.id)
 
        def checkPerm(self, user, perm):
                if not user.is_authenticated:
-                       return not self.private
+                       return perm == Permission.SEE_THREAD and not self.private
 
                if type(perm) == str:
                        perm = Permission[perm]
@@ -1096,8 +1117,16 @@ class Thread(db.Model):
                if self.package:
                        isMaintainer = isMaintainer or user in self.package.maintainers
 
+               canSee = not self.private or isMaintainer or user.rank.atLeast(UserRank.EDITOR)
+
                if perm == Permission.SEE_THREAD:
-                       return not self.private or isMaintainer or user.rank.atLeast(UserRank.EDITOR)
+                       return canSee
+
+               elif perm == Permission.COMMENT_THREAD:
+                       return canSee and (not self.locked or user.rank.atLeast(UserRank.MODERATOR))
+
+               elif perm == Permission.LOCK_THREAD:
+                       return user.rank.atLeast(UserRank.MODERATOR)
 
                else:
                        raise Exception("Permission {} is not related to threads".format(perm.name))
@@ -1109,6 +1138,104 @@ class ThreadReply(db.Model):
        author_id  = db.Column(db.Integer, db.ForeignKey("user.id"), nullable=False)
        created_at = db.Column(db.DateTime, nullable=False, default=datetime.datetime.utcnow)
 
+       def checkPerm(self, user, perm):
+               if not user.is_authenticated:
+                       return False
+
+               if type(perm) == str:
+                       perm = Permission[perm]
+               elif type(perm) != Permission:
+                       raise Exception("Unknown permission given to ThreadReply.checkPerm()")
+
+               if perm == Permission.EDIT_REPLY:
+                       return user == self.author and user.rank.atLeast(UserRank.MEMBER) and not self.thread.locked
+
+               elif perm == Permission.DELETE_REPLY:
+                       return user.rank.atLeast(UserRank.MODERATOR) and self.thread.replies[0] != self
+
+               else:
+                       raise Exception("Permission {} is not related to threads".format(perm.name))
+
+
+class PackageReview(db.Model):
+       id         = db.Column(db.Integer, primary_key=True)
+
+       package_id = db.Column(db.Integer, db.ForeignKey("package.id"), nullable=True)
+       package    = db.relationship("Package", foreign_keys=[package_id], backref=db.backref("reviews", lazy=True))
+
+       created_at = db.Column(db.DateTime, nullable=False, default=datetime.datetime.utcnow)
+
+       author_id  = db.Column(db.Integer, db.ForeignKey("user.id"), nullable=False)
+       author     = db.relationship("User", foreign_keys=[author_id], backref=db.backref("reviews", lazy=True))
+
+       recommends = db.Column(db.Boolean, nullable=False)
+
+       thread     = db.relationship("Thread", uselist=False, back_populates="review")
+
+       def asSign(self):
+               return 1 if self.recommends else -1
+
+       def getEditURL(self):
+               return self.package.getReviewURL()
+
+       def getDeleteURL(self):
+               return url_for("packages.delete_review",
+                               author=self.package.author.username,
+                               name=self.package.name)
+
+
+class AuditSeverity(enum.Enum):
+       NORMAL = 0 # Normal user changes
+       EDITOR = 1 # Editor changes
+       MODERATION = 2 # Destructive / moderator changes
+
+       def __str__(self):
+               return self.name
+
+       def getTitle(self):
+               return self.name.replace("_", " ").title()
+
+       @classmethod
+       def choices(cls):
+               return [(choice, choice.getTitle()) for choice in cls]
+
+       @classmethod
+       def coerce(cls, item):
+               return item if type(item) == AuditSeverity else AuditSeverity[item]
+
+
+
+class AuditLogEntry(db.Model):
+       id         = db.Column(db.Integer, primary_key=True)
+
+       created_at = db.Column(db.DateTime, nullable=False, default=datetime.datetime.utcnow)
+
+       causer_id  = db.Column(db.Integer, db.ForeignKey("user.id"), nullable=False)
+       causer     = db.relationship("User", foreign_keys=[causer_id])
+
+       severity   = db.Column(db.Enum(AuditSeverity), nullable=False)
+
+       title      = db.Column(db.String(100), nullable=False)
+       url        = db.Column(db.String(200), nullable=True)
+
+       package_id = db.Column(db.Integer, db.ForeignKey("package.id"), nullable=True)
+       package    = db.relationship("Package", foreign_keys=[package_id])
+
+       description = db.Column(db.Text, nullable=True, default=None)
+
+       def __init__(self, causer, severity, title, url, package=None, description=None):
+               if len(title) > 100:
+                       title = title[:99] + "…"
+
+               self.causer   = causer
+               self.severity = severity
+               self.title    = title
+               self.url      = url
+               self.package  = package
+               self.description = description
+
+
+
 
 REPO_BLACKLIST = [".zip", "mediafire.com", "dropbox.com", "weebly.com", \
                "minetest.net", "dropboxusercontent.com", "4shared.com", \