ks/apps/api/admin/user/views.py

# coding=utf-8

import json

from django.db import transaction
from django.contrib.auth import get_user_model
from rest_framework.decorators import action
from utils.permission import IsAdministrator
from utils import response_error, response_ok
from utils.custom_modelviewset import CustomModelViewSet
from utils.exceptions import CustomError
from rest_framework.views import APIView
from apps.staff.serializers import UserSerializer
from apps.staff.filters import UserFilter
from apps.system.models import SysLog
from apps.examination.exam.models import ExamLog

User = get_user_model()

class UserViewSet(CustomModelViewSet):
    permission_classes = [IsAdministrator, ]
    queryset = User.objects.filter()
    serializer_class = UserSerializer

    def filter_queryset(self, queryset):
        f = UserFilter(self.request.GET, queryset=queryset)
        return f.qs

    def perform_create(self, serializer):
        super(UserViewSet, self).perform_create(serializer)
        instance = serializer.instance
        validated_data = serializer.validated_data
        SysLog.objects.addnew(self.request.user, SysLog.INSERT, u'添加账户[%s]，id=%d' % (instance.username, instance.id), validated_data)

    def perform_update(self, serializer):
        super(UserViewSet, self).perform_update(serializer)
        instance = serializer.instance
        validated_data = serializer.validated_data
        SysLog.objects.addnew(self.request.user, SysLog.UPDATE, u'修改账户[%s]，id=%d' % (instance.username, instance.id), validated_data)

    def destroy(self, request, *args, **kwargs):
        with transaction.atomic():
            instance = self.get_object()
            log_count = SysLog.objects.filter(user_id=instance.id).count()
            exam_log_count = ExamLog.objects.filter(user_id=instance.id).count()
            if log_count > 0 or exam_log_count > 0:
                raise CustomError(u'该账号有使用记录，禁止删除！')

            SysLog.objects.addnew(self.request.user, SysLog.DELETE, u'删除用户[%s]，id=%d' % (instance.username, instance.id))
            instance.delete()
        return response_ok()

    @action(methods=['post'], detail=True)
    def reset_password(self, request, pk):
        with transaction.atomic():
            instance = self.get_object()
            instance.set_password('111111')
            instance.save()

            SysLog.objects.addnew(self.request.user, SysLog.UPDATE, u'重置用户[%s]密码，id=%d' % (instance.username, instance.id))
        return response_ok()

class ChangePasswordView(APIView):
    permission_classes = [IsAdministrator, ]

    def post(self, request):
        data = json.loads(request.body)

        new_password = data['new_password'].strip(' ')
        confirm_password = data['confirm_password'].strip(u' ')
        old_password = data['old_password'].strip(u' ')

        with transaction.atomic():
            request.user.change_password(new_password, confirm_password, old_password)
            request.user.save()
            SysLog.objects.addnew(self.request.user, SysLog.UPDATE, u'修改账户密码')
        return response_ok()