2659: add permit_anonymous_browsing_for_public_data
[arvados.git] / apps / workbench / app / controllers / users_controller.rb
1 class UsersController < ApplicationController
2   skip_around_filter :require_thread_api_token, only: :welcome
3   skip_before_filter :check_user_agreements, only: [:welcome, :inactive]
4   skip_before_filter :check_user_profile, only: [:welcome, :inactive, :profile]
5   skip_before_filter :find_object_by_uuid, only: [:welcome, :activity, :storage]
6   before_filter :ensure_current_user_is_admin, only: [:sudo, :unsetup, :setup]
7
8   def show
9     if params[:uuid] == current_user.uuid
10       respond_to do |f|
11         f.html do
12           redirect_to(params[:return_to] || project_path(params[:uuid]))
13         end
14       end
15     else
16       super
17     end
18   end
19
20   def welcome
21     if current_user
22       redirect_to (params[:return_to] || '/')
23     end
24   end
25
26   def inactive
27     if current_user.andand.is_invited
28       redirect_to (params[:return_to] || '/')
29     end
30   end
31
32   def profile
33     params[:offer_return_to] ||= params[:return_to]
34   end
35
36   def activity
37     @breadcrumb_page_name = nil
38     @users = User.limit(params[:limit])
39     @user_activity = {}
40     @activity = {
41       logins: {},
42       jobs: {},
43       pipeline_instances: {}
44     }
45     @total_activity = {}
46     @spans = [['This week', Time.now.beginning_of_week, Time.now],
47               ['Last week',
48                Time.now.beginning_of_week.advance(weeks:-1),
49                Time.now.beginning_of_week],
50               ['This month', Time.now.beginning_of_month, Time.now],
51               ['Last month',
52                1.month.ago.beginning_of_month,
53                Time.now.beginning_of_month]]
54     @spans.each do |span, threshold_start, threshold_end|
55       @activity[:logins][span] = Log.
56         filter([[:event_type, '=', 'login'],
57                 [:object_kind, '=', 'arvados#user'],
58                 [:created_at, '>=', threshold_start],
59                 [:created_at, '<', threshold_end]])
60       @activity[:jobs][span] = Job.
61         filter([[:created_at, '>=', threshold_start],
62                 [:created_at, '<', threshold_end]])
63       @activity[:pipeline_instances][span] = PipelineInstance.
64         filter([[:created_at, '>=', threshold_start],
65                 [:created_at, '<', threshold_end]])
66       @activity.each do |type, act|
67         records = act[span]
68         @users.each do |u|
69           @user_activity[u.uuid] ||= {}
70           @user_activity[u.uuid][span + ' ' + type.to_s] ||= 0
71         end
72         records.each do |record|
73           @user_activity[record.modified_by_user_uuid] ||= {}
74           @user_activity[record.modified_by_user_uuid][span + ' ' + type.to_s] ||= 0
75           @user_activity[record.modified_by_user_uuid][span + ' ' + type.to_s] += 1
76           @total_activity[span + ' ' + type.to_s] ||= 0
77           @total_activity[span + ' ' + type.to_s] += 1
78         end
79       end
80     end
81     @users = @users.sort_by do |a|
82       [-@user_activity[a.uuid].values.inject(:+), a.full_name]
83     end
84     # Prepend a "Total" pseudo-user to the sorted list
85     @user_activity[nil] = @total_activity
86     @users = [OpenStruct.new(uuid: nil)] + @users
87   end
88
89   def storage
90     @breadcrumb_page_name = nil
91     @users = User.limit(params[:limit])
92     @user_storage = {}
93     total_storage = {}
94     @log_date = {}
95     @users.each do |u|
96       @user_storage[u.uuid] ||= {}
97       storage_log = Log.
98         filter([[:object_uuid, '=', u.uuid],
99                 [:event_type, '=', 'user-storage-report']]).
100         order(:created_at => :desc).
101         limit(1)
102       storage_log.each do |log_entry|
103         # We expect this block to only execute once since we specified limit(1)
104         @user_storage[u.uuid] = log_entry['properties']
105         @log_date[u.uuid] = log_entry['event_at']
106       end
107       total_storage.merge!(@user_storage[u.uuid]) { |k,v1,v2| v1 + v2 }
108     end
109     @users = @users.sort_by { |u|
110       [-@user_storage[u.uuid].values.push(0).inject(:+), u.full_name]}
111     # Prepend a "Total" pseudo-user to the sorted list
112     @users = [OpenStruct.new(uuid: nil)] + @users
113     @user_storage[nil] = total_storage
114   end
115
116   def show_pane_list
117     if current_user.andand.is_admin
118       super | %w(Admin)
119     else
120       super
121     end
122   end
123
124   def index_pane_list
125     if current_user.andand.is_admin
126       super | %w(Activity)
127     else
128       super
129     end
130   end
131
132   def sudo
133     resp = arvados_api_client.api(ApiClientAuthorization, '', {
134                                     api_client_authorization: {
135                                       owner_uuid: @object.uuid
136                                     }
137                                   })
138     redirect_to root_url(api_token: resp[:api_token])
139   end
140
141   def home
142     @my_ssh_keys = AuthorizedKey.where(authorized_user_uuid: current_user.uuid)
143     @my_tag_links = {}
144
145     @my_jobs = Job.
146       limit(10).
147       order('created_at desc').
148       where(created_by: current_user.uuid)
149
150     @my_collections = Collection.
151       limit(10).
152       order('created_at desc').
153       where(created_by: current_user.uuid)
154     collection_uuids = @my_collections.collect &:uuid
155
156     @persist_state = {}
157     collection_uuids.each do |uuid|
158       @persist_state[uuid] = 'cache'
159     end
160
161     Link.filter([['head_uuid', 'in', collection_uuids],
162                              ['link_class', 'in', ['tag', 'resources']]]).
163       each do |link|
164       case link.link_class
165       when 'tag'
166         (@my_tag_links[link.head_uuid] ||= []) << link
167       when 'resources'
168         if link.name == 'wants'
169           @persist_state[link.head_uuid] = 'persistent'
170         end
171       end
172     end
173
174     @my_pipelines = PipelineInstance.
175       limit(10).
176       order('created_at desc').
177       where(created_by: current_user.uuid)
178
179     respond_to do |f|
180       f.js { render template: 'users/home.js' }
181       f.html { render template: 'users/home' }
182     end
183   end
184
185   def unsetup
186     if current_user.andand.is_admin
187       @object.unsetup
188     end
189     show
190   end
191
192   def setup
193     respond_to do |format|
194       if current_user.andand.is_admin
195         setup_params = {}
196         setup_params[:send_notification_email] = "#{Rails.configuration.send_user_setup_notification_email}"
197         if params['user_uuid'] && params['user_uuid'].size>0
198           setup_params[:uuid] = params['user_uuid']
199         end
200         if params['email'] && params['email'].size>0
201           user = {email: params['email']}
202           setup_params[:user] = user
203         end
204         if params['openid_prefix'] && params['openid_prefix'].size>0
205           setup_params[:openid_prefix] = params['openid_prefix']
206         end
207         if params['repo_name'] && params['repo_name'].size>0
208           setup_params[:repo_name] = params['repo_name']
209         end
210         if params['vm_uuid'] && params['vm_uuid'].size>0
211           setup_params[:vm_uuid] = params['vm_uuid']
212         end
213
214         if User.setup setup_params
215           format.js
216         else
217           self.render_error status: 422
218         end
219       else
220         self.render_error status: 422
221       end
222     end
223   end
224
225   def setup_popup
226     @vms = VirtualMachine.all.results
227
228     @current_selections = find_current_links @object
229
230     respond_to do |format|
231       format.html
232       format.js
233     end
234   end
235
236   def manage_account
237     # repositories current user can read / write
238     repo_links = Link.
239       filter([['head_uuid', 'is_a', 'arvados#repository'],
240               ['tail_uuid', '=', current_user.uuid],
241               ['link_class', '=', 'permission'],
242              ])
243     @my_repositories = Repository.where uuid: repo_links.collect(&:head_uuid)
244     @repo_writable = {}
245     repo_links.each do |link|
246       if link.name.in? ['can_write', 'can_manage']
247         @repo_writable[link.head_uuid] = link.name
248       end
249     end
250
251     # virtual machines the current user can login into
252     @my_vm_logins = {}
253     Link.where(tail_uuid: current_user.uuid,
254                link_class: 'permission',
255                name: 'can_login').
256           each do |perm_link|
257             if perm_link.properties.andand[:username]
258               @my_vm_logins[perm_link.head_uuid] ||= []
259               @my_vm_logins[perm_link.head_uuid] << perm_link.properties[:username]
260             end
261           end
262     @my_virtual_machines = VirtualMachine.where(uuid: @my_vm_logins.keys)
263
264     # current user's ssh keys
265     @my_ssh_keys = AuthorizedKey.where(key_type: 'SSH', owner_uuid: current_user.uuid)
266
267     respond_to do |f|
268       f.html { render template: 'users/manage_account' }
269     end
270   end
271
272   def add_ssh_key_popup
273     respond_to do |format|
274       format.html
275       format.js
276     end
277   end
278
279   def add_ssh_key
280     respond_to do |format|
281       key_params = {'key_type' => 'SSH'}
282       key_params['authorized_user_uuid'] = current_user.uuid
283
284       if params['name'] && params['name'].size>0
285         key_params['name'] = params['name'].strip
286       end
287       if params['public_key'] && params['public_key'].size>0
288         key_params['public_key'] = params['public_key'].strip
289       end
290
291       if !key_params['name'] && params['public_key'].andand.size>0
292         split_key = key_params['public_key'].split
293         key_params['name'] = split_key[-1] if (split_key.size == 3)
294       end
295
296       new_key = AuthorizedKey.create! key_params
297       if new_key
298         format.js
299       else
300         self.render_error status: 422
301       end
302     end
303   end
304
305   protected
306
307   def find_current_links user
308     current_selections = {}
309
310     if !user
311       return current_selections
312     end
313
314     # oid login perm
315     oid_login_perms = Link.where(tail_uuid: user.email,
316                                    head_kind: 'arvados#user',
317                                    link_class: 'permission',
318                                    name: 'can_login')
319
320     if oid_login_perms.any?
321       prefix_properties = oid_login_perms.first.properties
322       current_selections[:identity_url_prefix] = prefix_properties[:identity_url_prefix]
323     end
324
325     # repo perm
326     repo_perms = Link.where(tail_uuid: user.uuid,
327                             head_kind: 'arvados#repository',
328                             link_class: 'permission',
329                             name: 'can_write')
330     if repo_perms.any?
331       repo_uuid = repo_perms.first.head_uuid
332       repos = Repository.where(head_uuid: repo_uuid)
333       if repos.any?
334         repo_name = repos.first.name
335         current_selections[:repo_name] = repo_name
336       end
337     end
338
339     # vm login perm
340     vm_login_perms = Link.where(tail_uuid: user.uuid,
341                               head_kind: 'arvados#virtualMachine',
342                               link_class: 'permission',
343                               name: 'can_login')
344     if vm_login_perms.any?
345       vm_uuid = vm_login_perms.first.head_uuid
346       current_selections[:vm_uuid] = vm_uuid
347     end
348
349     return current_selections
350   end
351
352 end