# coding=utf-8 import json from django.db import transaction from django.contrib.auth import get_user_model from utils.permission import IsAdministrator from utils import response_error, response_ok from utils.custom_modelviewset import CustomModelViewSet from utils.exceptions import CustomError from rest_framework.views import APIView from apps.staff.serializers import UserSerializer from apps.staff.filters import UserFilter from apps.system.models import SysLog from apps.examination.exam.models import ExamLog User = get_user_model() class UserViewSet(CustomModelViewSet): permission_classes = [IsAdministrator, ] queryset = User.objects.filter() serializer_class = UserSerializer def filter_queryset(self, queryset): f = UserFilter(self.request.GET, queryset=queryset) return f.qs def perform_create(self, serializer): super(UserViewSet, self).perform_create(serializer) instance = serializer.instance validated_data = serializer.validated_data SysLog.objects.addnew(self.request.user, SysLog.INSERT, u'添加账户[%s],id=%d' % (instance.username, instance.id), validated_data) def perform_update(self, serializer): super(UserViewSet, self).perform_update(serializer) instance = serializer.instance validated_data = serializer.validated_data SysLog.objects.addnew(self.request.user, SysLog.UPDATE, u'修改账户[%s],id=%d' % (instance.username, instance.id), validated_data) def destroy(self, request, *args, **kwargs): with transaction.atomic(): instance = self.get_object() log_count = SysLog.objects.filter(user_id=instance.id).count() exam_log_count = ExamLog.objects.filter(user_id=instance.id).count() if log_count > 0 or exam_log_count > 0: raise CustomError(u'该账号有使用记录,禁止删除!') SysLog.objects.addnew(self.request.user, SysLog.DELETE, u'删除用户[%s],id=%d' % (instance.name, instance.id)) instance.delete() return response_ok() class ChangePasswordView(APIView): permission_classes = [IsAdministrator, ] def post(self, request): data = json.loads(request.body) new_password = data['new_password'].strip(' ') confirm_password = data['confirm_password'].strip(u' ') old_password = data['old_password'].strip(u' ') with transaction.atomic(): request.user.change_password(new_password, confirm_password, old_password) request.user.save() SysLog.objects.addnew(self.request.user, SysLog.UPDATE, u'修改账户密码') return response_ok()