[FIX] website_blog: employee can't post a comment
[odoo/odoo.git] / addons / website_blog / controllers / main.py
1 # -*- coding: utf-8 -*-
2 ##############################################################################
3 #
4 #    OpenERP, Open Source Management Solution
5 #    Copyright (C) 2013-Today OpenERP SA (<http://www.openerp.com>).
6 #
7 #    This program is free software: you can redistribute it and/or modify
8 #    it under the terms of the GNU Affero General Public License as
9 #    published by the Free Software Foundation, either version 3 of the
10 #    License, or (at your option) any later version.
11 #
12 #    This program is distributed in the hope that it will be useful,
13 #    but WITHOUT ANY WARRANTY; without even the implied warranty of
14 #    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
15 #    GNU Affero General Public License for more details.
16 #
17 #    You should have received a copy of the GNU Affero General Public License
18 #    along with this program.  If not, see <http://www.gnu.org/licenses/>.
19 #
20 ##############################################################################
21
22 from openerp.addons.web import http
23 from openerp.addons.web.http import request
24 from openerp.addons.website.models import website
25 from openerp.tools.translate import _
26 from openerp import SUPERUSER_ID
27
28 import werkzeug
29
30
31 MONTHS = [None, _('January'), _('February'), _('March'), _('April'),
32     _('May'), _('June'), _('July'), _('August'), _('September'),
33     _('October'), _('November'), _('December')]
34
35
36 class WebsiteBlog(http.Controller):
37     _category_post_per_page = 6
38     _post_comment_per_page = 6
39
40     def nav_list(self):
41         blog_post_obj = request.registry['blog.post']
42         groups = blog_post_obj.read_group(request.cr, request.uid, [], ['name', 'create_date'],
43             groupby="create_date", orderby="create_date asc", context=request.context)
44         for group in groups:
45             group['date'] = "%s_%s" % (group['__domain'][0][2], group['__domain'][1][2])
46         return groups
47
48     @website.route([
49         '/blog',
50         '/blog/page/<int:page>/',
51     ], type='http', auth="public", multilang=True)
52     def blogs(self, page=1):
53         BYPAGE = 60
54         cr, uid, context = request.cr, request.uid, request.context
55         blog_obj = request.registry['blog.post']
56         total = blog_obj.search(cr, uid, [], count=True, context=context)
57         pager = request.website.pager(
58             url='/blog/',
59             total=total,
60             page=page,
61             step=BYPAGE,
62         )
63         bids = blog_obj.search(cr, uid, [], offset=(page-1)*BYPAGE, limit=BYPAGE, context=context)
64         blogs = blog_obj.browse(cr, uid, bids, context=context)
65         return request.website.render("website_blog.latest_blogs", {
66             'blogs': blogs,
67             'pager': pager
68         })
69
70     @website.route([
71         '/blog/<model("blog.category"):category>/',
72         '/blog/<model("blog.category"):category>/page/<int:page>/',
73         '/blog/<model("blog.category"):category>/tag/<model("blog.tag"):tag>/',
74         '/blog/<model("blog.category"):category>/tag/<model("blog.tag"):tag>/page/<int:page>/',
75         '/blog/<model("blog.category"):category>/date/<string(length=21):date>/',
76         '/blog/<model("blog.category"):category>/date/<string(length=21):date>/page/<int:page>/',
77         '/blog/<model("blog.category"):category>/tag/<model("blog.tag"):tag>/date/<string(length=21):date>/',
78         '/blog/<model("blog.category"):category>/tag/<model("blog.tag"):tag>/date/<string(length=21):date>/page/<int:page>/',
79     ], type='http', auth="public", multilang=True)
80     def blog(self, category=None, tag=None, date=None, page=1, **opt):
81         """ Prepare all values to display the blog.
82
83         :param category: category currently browsed.
84         :param tag: tag that is currently used to filter blog posts
85         :param integer page: current page of the pager. Can be the category or
86                             post pager.
87         :param date: date currently used to filter blog posts (dateBegin_dateEnd)
88
89         :return dict values: values for the templates, containing
90
91          - 'blog_posts': list of browse records that are the posts to display
92                          in a given category, if not blog_post_id
93          - 'category': browse of the current category, if category_id
94          - 'categories': list of browse records of categories
95          - 'pager': the pager to display posts pager in a category
96          - 'tag': current tag, if tag_id
97          - 'nav_list': a dict [year][month] for archives navigation
98         """
99         BYPAGE = 10
100
101         website.preload_records(category, tag)
102         cr, uid, context = request.cr, request.uid, request.context
103         blog_post_obj = request.registry['blog.post']
104
105         blog_posts = None
106
107         category_obj = request.registry['blog.category']
108         category_ids = category_obj.search(cr, uid, [], context=context)
109         categories = category_obj.browse(cr, uid, category_ids, context=context)
110
111         path_filter = ""
112         domain = []
113
114         if category:
115             path_filter += "%s/" % category.id
116             domain += [("id", "in", [blog.id for blog in category.blog_post_ids])]
117         if tag:
118             path_filter += 'tag/%s/' % tag.id
119             domain += [("id", "in", [blog.id for blog in tag.blog_post_ids])]
120         if date:
121             path_filter += "date/%s/" % date
122             domain += [("create_date", ">=", date.split("_")[0]), ("create_date", "<=", date.split("_")[1])]
123
124         blog_post_ids = blog_post_obj.search(cr, uid, domain, context=context)
125         blog_posts = blog_post_obj.browse(cr, uid, blog_post_ids, context=context)
126
127         pager = request.website.pager(
128             url="/blog/%s" % path_filter,
129             total=len(blog_posts),
130             page=page,
131             step=self._category_post_per_page,
132             scope=BYPAGE
133         )
134         pager_begin = (page - 1) * self._category_post_per_page
135         pager_end = page * self._category_post_per_page
136         blog_posts = blog_posts[pager_begin:pager_end]
137
138         tag_obj = request.registry['blog.tag']
139         tag_ids = tag_obj.search(cr, uid, [], context=context)
140         tags = tag_obj.browse(cr, uid, tag_ids, context=context)
141
142         values = {
143             'category': category,
144             'categories': categories,
145             'tags': tags,
146             'tag': tag,
147             'blog_posts': blog_posts,
148             'pager': pager,
149             'nav_list': self.nav_list(),
150             'path_filter': path_filter,
151             'date': date,
152         }
153         return request.website.render("website_blog.blog_post_short", values)
154
155     @website.route([
156         '/blogpost/<model("blog.post"):blog_post>/',
157     ], type='http', auth="public", multilang=True)
158     def blog_post(self, blog_post, tag=None, date=None, page=1, enable_editor=None, **post):
159         """ Prepare all values to display the blog.
160
161         :param blog_post: blog post currently browsed. If not set, the user is
162                           browsing the category and a post pager is calculated.
163                           If set the user is reading the blog post and a
164                           comments pager is calculated.
165         :param category: category currently browsed.
166         :param tag: tag that is currently used to filter blog posts
167         :param integer page: current page of the pager. Can be the category or
168                             post pager.
169         :param date: date currently used to filter blog posts (dateBegin_dateEnd)
170
171          - 'enable_editor': editor control
172
173         :return dict values: values for the templates, containing
174
175          - 'blog_post': browse of the current post, if blog_post_id
176          - 'category': browse of the current category, if category_id
177          - 'categories': list of browse records of categories
178          - 'pager': the pager to display comments pager in a blog post
179          - 'tag': current tag, if tag_id
180          - 'nav_list': a dict [year][month] for archives navigation
181         """
182
183         website.preload_records(blog_post)
184
185         pager_url = "/blogpost/%s" % blog_post.id
186
187         pager = request.website.pager(
188             url=pager_url,
189             total=len(blog_post.website_message_ids),
190             page=page,
191             step=self._post_comment_per_page,
192             scope=7
193         )
194         pager_begin = (page - 1) * self._post_comment_per_page
195         pager_end = page * self._post_comment_per_page
196         blog_post.website_message_ids = blog_post.website_message_ids[pager_begin:pager_end]
197
198         cr, uid, context = request.cr, request.uid, request.context
199         category_obj = request.registry['blog.category']
200         category_ids = category_obj.search(cr, uid, [], context=context)
201         categories = category_obj.browse(cr, uid, category_ids, context=context)
202
203         tag_obj = request.registry['blog.tag']
204         tag_ids = tag_obj.search(cr, uid, [], context=context)
205         tags = tag_obj.browse(cr, uid, tag_ids, context=context)
206
207         values = {
208             'category': blog_post.category_id,
209             'categories': categories,
210             'tags': tags,
211             'tag': tag and request.registry['blog.tag'].browse(cr, uid, int(tag), context=context) or None,
212             'blog_post': blog_post,
213             'main_object': blog_post,
214             'pager': pager,
215             'nav_list': self.nav_list(),
216             'enable_editor': enable_editor,
217             'date': date,
218             'date_name': date and "%s %s" % (MONTHS[int(date.split("-")[1])], date.split("-")[0]) or None
219         }
220         return request.website.render("website_blog.blog_post_complete", values)
221
222     @website.route(['/blogpost/comment'], type='http', auth="public", methods=['POST'])
223     def blog_post_comment(self, blog_post_id=0, **post):
224         cr, uid, context = request.cr, request.uid, request.context
225         if post.get('comment'):
226             user = request.registry['res.users'].browse(cr, SUPERUSER_ID, uid, context=context)
227             group_ids = user.groups_id
228             group_id = request.registry["ir.model.data"].get_object_reference(cr, uid, 'website_mail', 'group_comment')[1]
229             if group_id in [group.id for group in group_ids]:
230                 blog_post = request.registry['blog.post']
231                 blog_post.check_access_rights(cr, uid, 'read')
232                 blog_post.message_post(
233                     cr, SUPERUSER_ID, int(blog_post_id),
234                     body=post.get('comment'),
235                     type='comment',
236                     subtype='mt_comment',
237                     author_id=user.partner_id.id,
238                     context=dict(context, mail_create_nosubcribe=True))
239         return werkzeug.utils.redirect(request.httprequest.referrer + "#comments")
240
241     @website.route('/blogpost/new', type='http', auth="public", multilang=True)
242     def blog_post_create(self, category_id, **post):
243         cr, uid, context = request.cr, request.uid, request.context
244         create_context = dict(context, mail_create_nosubscribe=True)
245         new_blog_post_id = request.registry['blog.post'].create(
246             request.cr, request.uid, {
247                 'category_id': category_id,
248                 'name': _("Blog Post Title"),
249                 'content': '',
250                 'website_published': False,
251             }, context=create_context)
252         return werkzeug.utils.redirect("/blogpost/%s/?enable_editor=1" % new_blog_post_id)
253
254     @website.route('/blogpost/duplicate', type='http', auth="public")
255     def blog_post_copy(self, blog_post_id, **post):
256         """ Duplicate a blog.
257
258         :param blog_post_id: id of the blog post currently browsed.
259
260         :return redirect to the new blog created
261         """
262         cr, uid, context = request.cr, request.uid, request.context
263         create_context = dict(context, mail_create_nosubscribe=True)
264         new_blog_post_id = request.registry['blog.post'].copy(cr, uid, blog_post_id, {}, context=create_context)
265         return werkzeug.utils.redirect("/blogpost/%s/?enable_editor=1" % new_blog_post_id)