zulip/zerver/management/commands/knight.py

60 lines
2.1 KiB
Python

from __future__ import absolute_import
from optparse import make_option
from django.core.management.base import BaseCommand, CommandError
from django.core.exceptions import ValidationError
from zerver.lib.actions import do_change_is_admin
from zerver.models import UserProfile
class Command(BaseCommand):
help = """Give an existing user administrative permissions over their (own) Realm.
ONLY perform this on customer request from an authorized person.
"""
option_list = BaseCommand.option_list + (
make_option('-f', '--for-real',
dest='ack',
action="store_true",
default=False,
help='Acknowledgement that this is done according to policy.'),
make_option('--revoke',
dest='grant',
action="store_false",
default=True,
help='Remove an administrator\'s rights.'),
)
def handle(self, *args, **options):
try:
email = args[0]
except ValueError:
raise CommandError("""Please specify a user.""")
try:
profile = UserProfile.objects.get(email=email)
except ValidationError:
raise CommandError("No such user.")
if options['grant']:
if profile.has_perm('administer', profile.realm):
raise CommandError("User already has permission for this realm.")
else:
if options['ack']:
do_change_is_admin(profile, True)
print "Done!"
else:
print "Would have made %s an administrator for %s" % (email, profile.realm.domain)
else:
if profile.has_perm('administer', profile.realm):
if options['ack']:
do_change_is_admin(profile, False)
print "Done!"
else:
print "Would have removed %s's administrator rights on %s" % (email,
profile.realm.domain)
else:
raise CommandError("User did not have permission for this realm!")