dmart 1.4.40.post8__py3-none-any.whl

dmart/plugins/ldap_manager/dmart.schema

@@ -0,0 +1,146 @@
+
+
+attributetype ( 1.1.2.1.1
+  NAME 'isActive'
+  DESC 'Account activation status : true = active, false = disabled'
+  EQUALITY booleanMatch
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
+  SINGLE-VALUE
+ )
+
+attributetype ( 1.1.2.1.2
+  NAME 'mailAlias'
+  DESC 'Email alias, another name by which the user can receive emails to'
+  SUP mail
+ )
+
+attributetype ( 1.1.2.1.3
+  NAME 'mailForward'
+  DESC 'Email forward'
+  SUP mail
+ )
+
+attributetype ( 1.1.2.1.4
+  NAME 'authorizedService'
+  DESC 'Allowed service name'
+  EQUALITY caseIgnoreMatch
+  ORDERING caseIgnoreOrderingMatch
+  SUBSTR caseIgnoreSubstringsMatch
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
+ ) 
+
+# validation must be removed when the email or mobile are changed.
+attributetype ( 1.1.2.1.5 
+  NAME 'validation' 
+  DESC 'Validation of user'
+  EQUALITY caseIgnoreMatch
+  ORDERING caseIgnoreOrderingMatch
+  SUBSTR caseIgnoreSubstringsMatch
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 
+ )
+
+attributetype ( 1.1.2.1.6 
+	NAME 'changePasswordRequired' 
+	EQUALITY booleanMatch 
+	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 
+	SINGLE-VALUE 
+ )
+ 
+attributetype ( 1.1.2.1.7 
+  NAME ( 'dob' 'dateOfBirth' )
+  DESC 'Date of Birth'
+  EQUALITY generalizedTimeMatch 
+  ORDERING generalizedTimeOrderingMatch 
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 
+  SINGLE-VALUE 
+ )
+
+attributetype ( 1.1.2.1.13 
+  NAME ( 'lastLogin' )
+  DESC 'last log in'
+  EQUALITY generalizedTimeMatch 
+  ORDERING generalizedTimeOrderingMatch 
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 
+  SINGLE-VALUE 
+ )
+
+
+
+# attributetype ( 1.1.2.1.7 
+# NAME 'dateOfBirth'
+#  DESC 'Date of Birth'
+#  EQUALITY integerMatch
+#  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 
+#  SINGLE-VALUE 
+#  )
+  
+  
+attributetype ( 1.1.2.1.8 
+  NAME 'secretQuestion'
+  DESC 'Secret Question, 128 bytes'
+  EQUALITY caseIgnoreMatch
+  SUBSTR caseIgnoreSubstringsMatch
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} 
+  SINGLE-VALUE 
+ )
+
+attributetype ( 1.1.2.1.9 
+  NAME 'secretAnswer'
+  DESC 'Secret Question, 128 bytes'
+  EQUALITY caseIgnoreMatch
+  SUBSTR caseIgnoreSubstringsMatch
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} 
+  SINGLE-VALUE 
+ )
+
+attributetype ( 1.1.2.1.10 
+  NAME 'cityName'
+  EQUALITY caseIgnoreMatch 
+  ORDERING caseIgnoreOrderingMatch 
+  SUBSTR caseIgnoreSubstringsMatch 
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 
+  SINGLE-VALUE 
+ )
+ 
+attributetype ( 1.1.2.1.11 
+  NAME 'gender' 
+  EQUALITY booleanMatch 
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 
+  SINGLE-VALUE 
+ )
+
+
+attributetype ( 1.1.2.1.12 
+  NAME 'memberEmail' 
+  SUP   mail
+ )
+
+objectclass (1.1.2.2.1
+  NAME 'dmartPerson'
+  DESC 'dmart Person'
+  SUP  inetOrgPerson
+  STRUCTURAL
+  MUST ( commonName )
+  MAY ( surname $ givenName $ countryName $ telephoneNumber $ homeTelephoneNumber $ 
+        mobileTelephoneNumber $ displayName $ mail $ description $ postalAddress $ 
+        streetAddress $ labeledURI $ jpegPhoto $ preferredLanguage $
+        organizationName $ homePostalAddress $ cityName $ dateOfBirth $ gender ) 
+  )
+  
+objectclass ( 1.1.2.2.2
+  NAME 'dmartUser'
+  DESC 'dmart User'
+  SUP dmartPerson 
+  STRUCTURAL
+  MUST ( userPassword )
+  MAY ( mailAlias $ mailForward $ authorizedService $ isActive $ title $ validation $ changePasswordRequired $ secretQuestion $ secretAnswer $ lastLogin )
+ )
+
+objectclass ( 1.1.2.2.3
+  NAME 'dmartGroup'
+  DESC 'dmart Group'
+  STRUCTURAL
+  MUST ( cn )
+  MAY  ( isActive $ mailAlias $ mailForward $ memberEmail $ description ) 
+ )
+ 

dmart/plugins/ldap_manager/plugin.py

@@ -0,0 +1,100 @@
+from fastapi.logger import logger
+from models.core import Event, PluginBase, User
+from models.enums import ActionType
+from utils.settings import settings
+from data_adapters.adapter import data_adapter as db
+
+from ldap3 import AUTO_BIND_NO_TLS, MODIFY_REPLACE, Server, Connection, ALL
+
+
+class Plugin(PluginBase):
+
+    def __init__(self) -> None:
+        super().__init__()
+        try:
+            server = Server(settings.ldap_url, get_info=ALL)
+            self.conn = Connection(
+                server, 
+                user=settings.ldap_admin_dn, 
+                password=settings.ldap_pass, 
+                auto_bind=AUTO_BIND_NO_TLS
+            )
+        except Exception:
+            logger.error(
+                "Failed to connect to LDAP"
+            )
+            
+        
+
+    async def hook(self, data: Event):
+        if not hasattr(self, "conn"):
+            return
+        
+        # Type narrowing for PyRight
+        if not isinstance(data.shortname, str):
+            logger.warning(
+                "data.shortname is None and str is required at ldap_manager"
+            )
+            return
+        
+        if data.action_type == ActionType.delete:
+            self.delete(data.shortname)
+            return
+        
+        user_model: User = await db.load(
+            space_name=settings.management_space,
+            subpath=data.subpath,
+            shortname=data.shortname,
+            class_type=User
+        )
+        
+        if data.action_type == ActionType.create:
+            self.add(data.shortname, user_model)
+            
+        elif data.action_type == ActionType.update:
+            self.modify(data.shortname, user_model)
+            
+
+        elif data.action_type == ActionType.move and "src_shortname" in data.attributes:
+            self.delete(data.attributes['src_shortname'])
+            self.add(data.shortname, user_model)
+            
+            
+            
+    def delete(self, shortname: str):
+        self.conn.delete(f"cn={shortname},{settings.ldap_root_dn}")
+        
+    def add(
+        self, 
+        shortname: str, 
+        user_model: User
+    ):
+        self.conn.add(
+            f"cn={shortname},{settings.ldap_root_dn}", 
+            'dmartUser',
+            {
+                "cn": shortname.encode(),
+                "sn": shortname.encode(),
+                "gn": str(getattr(user_model, "displayname", "")).encode(),
+                "userPassword": getattr(user_model, "password", "").encode()
+            }
+        )
+        
+    def modify(
+        self, 
+        shortname: str, 
+        user_model: User
+    ):
+        self.conn.modify(
+            f"cn={shortname},{settings.ldap_root_dn}", 
+            {
+                "gn": [(
+                    MODIFY_REPLACE, 
+                    [str(getattr(user_model, "displayname", "")).encode()]
+                )],
+                "userPassword": [(
+                    MODIFY_REPLACE,
+                    [getattr(user_model, "password", "").encode()]
+                )],
+            }
+        )

dmart/plugins/ldap_manager/slapd.conf

@@ -0,0 +1,53 @@
+include /etc/openldap/schema/core.schema
+include /etc/openldap/schema/cosine.schema
+include /etc/openldap/schema/inetorgperson.schema
+#include /etc/openldap/schema/openldap.schema
+#include /etc/openldap/schema/nis.schema
+include /etc/openldap/schema/dmart.schema
+
+#pidfile         /var/lib/openldap/run/slapd.pid
+#argsfile        /var/lib/openldap/run/slapd.args
+
+modulepath /usr/lib/openldap
+moduleload back_mdb.so
+#moduleload accesslog.so
+# moduleload memberof.so
+
+loglevel conns filter acl config stats stats2
+# loglevel 0
+disallow bind_anon
+
+security ssf=1 update_ssf=112 simple_bind=64
+
+# TLSCertificateFile      /etc/ssl/ipa_imx_sh.crt
+# TLSCertificateKeyFile   /etc/ssl/private/ipa_imx_sh.key
+# TLSCACertificateFile    /etc/ssl/ipa_imx_sh.ca-bundle
+
+# TLSCertificateFile    /etc/openldap/certs/cert.pem
+# TLSCertificateKeyFile /etc/openldap/certs/key.pem
+
+access to *
+        by self write
+        by users read
+        by anonymous auth
+        by * none
+
+
+database        mdb
+maxsize         1073741824
+suffix          "dc=dmart"
+rootdn          "cn=root,dc=dmart"
+# Generate by running ... slappasswd -h {SSHA}
+rootpw          
+# directory       /var/lib/openldap/openldap-data
+directory /var/lib/ldap
+checkpoint 256 5
+index   objectClass     eq
+index   cn          eq,sub
+#overlay accesslog
+#logdb cn=log
+#logops writes reads
+#logold (objectclass=freexUser)
+# overlay memberof
+
+

dmart/plugins/local_notification/config.json

@@ -0,0 +1,13 @@
+{
+  "shortname": "local_notification",
+  "is_active": true,
+  "filters": {
+    "subpaths": ["__ALL__"],
+    "resource_types": ["ticket", "reaction", "comment"],
+    "schema_shortnames": ["__ALL__"],
+    "actions": ["create", "update", "progress_ticket"]
+  },
+  "type": "hook",
+  "ordinal": 1,
+  "listen_time": "after"
+}

dmart/plugins/local_notification/plugin.py

@@ -0,0 +1,123 @@
+import sys
+from models.core import Content, Payload, PluginBase, Event, Reaction, Comment, Relationship, Locator
+from models.enums import ContentType
+from utils.helpers import camel_case
+from data_adapters.adapter import data_adapter as db
+from uuid import uuid4
+from fastapi.logger import logger
+from utils.async_request import AsyncRequest
+from utils.settings import settings
+
+
+class Plugin(PluginBase):
+    async def hook(self, data: Event):
+        if not isinstance(data.shortname, str):
+            logger.error("data.shortname is None and str is required at local_notification")
+            return
+        
+        if data.resource_type is None:
+            return
+        
+        resource_type = data.resource_type
+        try:
+            class_type = getattr(sys.modules["models.core"], camel_case(resource_type))
+        except AttributeError:
+            logger.warning(
+                f"local_notification: unsupported resource_type={resource_type!s} (no model class found)"
+            )
+            return
+        parent_subpath, parent_shortname, parent_owner = None, None, None
+
+        entry = await db.load(
+            space_name=data.space_name,
+            subpath=data.subpath,
+            shortname=data.shortname,
+            class_type=class_type,
+            user_shortname=data.user_shortname
+        )
+        relationship = None
+        if class_type in [Reaction, Comment]:
+            parent_subpath, parent_shortname = data.subpath.rsplit("/", 1)
+            parent = await db.load(
+                space_name=data.space_name,
+                subpath=parent_subpath,
+                shortname=parent_shortname,
+                class_type=Content,
+                user_shortname=data.user_shortname
+            )
+            if parent.owner_shortname == data.user_shortname:
+                return
+
+            parent_owner = parent.owner_shortname
+
+            relationship = Relationship(
+                related_to=Locator(
+                    type=resource_type,
+                    space_name=data.space_name,
+                    subpath=parent_subpath,
+                    shortname=parent_shortname
+                ),
+                attributes={
+                    "parent_owner": parent_owner
+                }
+            )
+
+        else:
+            if not entry.owner_shortname or entry.owner_shortname == data.user_shortname:
+                return
+            parent_owner = entry.owner_shortname
+
+        uuid = uuid4()
+
+        meta_obj = Content(
+            uuid=uuid,
+            shortname=str(uuid)[:8],
+            owner_shortname=data.user_shortname,
+            is_active=True,
+            payload=Payload(
+                content_type=ContentType.json,
+                schema_shortname="notification",
+                body=f"{str(uuid)[:8]}.json"
+            ),
+        )
+        
+        if relationship is not None:
+            meta_obj.relationships = [relationship]
+
+        await db.save(
+            "personal",
+            f"people/{parent_owner}/notifications",
+            meta_obj,
+        )
+
+        notification_obj = {
+            "entry_space": data.space_name,
+            "entry_subpath": data.subpath,
+            "entry_shortname": data.shortname,
+
+            "action_by": data.user_shortname,
+            "action_type": data.action_type,
+            "resource_type": data.resource_type,
+            "is_read": "no"
+        }
+        await db.save_payload_from_json(
+            "personal",
+            f"people/{parent_owner}/notifications",
+            meta_obj,
+            notification_obj,
+        )
+
+        if not settings.websocket_url:
+            return
+
+        async with AsyncRequest() as client:
+            await client.post(
+                f"{settings.websocket_url}/send-message/{parent_owner}",
+                json={
+                    "type": "notification",
+                    "channels": [
+                        f"{data.space_name}:__ALL__:__ALL__:__ALL__:__ALL__",
+                    ],
+                    "message": notification_obj
+                }
+            )

dmart/plugins/realtime_updates_notifier/config.json

@@ -0,0 +1,12 @@
+{
+  "shortname": "realtime_updates_notifier",
+	"is_active": true,
+	"filters": {
+		"subpaths": ["__ALL__"],
+		"resource_types": ["__ALL__"],
+		"schema_shortnames": ["__ALL__"],
+		"actions": ["create", "update", "delete", "progress_ticket", "attach", "move", "lock", "unlock"]
+	},
+	"type": "hook",
+	"listen_time": "after"
+}

dmart/plugins/realtime_updates_notifier/plugin.py

@@ -0,0 +1,58 @@
+from models.core import PluginBase, Event
+from utils.async_request import AsyncRequest
+from utils.settings import settings
+
+
+class Plugin(PluginBase):
+
+    async def hook(self, data: Event):
+        all_MKW = "__ALL__"
+
+        state = data.attributes.get("state", all_MKW)
+
+        # if subpath = parent/child
+        # send to channels with subpaths "parent" and "parent/child"
+        channels = []
+        subpath = ""
+        for subpath_part in data.subpath.split("/"):
+            if not subpath_part:
+                continue
+            subpath += subpath_part
+            
+            # Consider channels with __ALL__ magic word
+            if not subpath.startswith("/"):
+                subpath = "/" + subpath
+            channels.extend([
+                f"{data.space_name}:{subpath}:{all_MKW}:{data.action_type}:{state}",
+                f"{data.space_name}:{subpath}:{all_MKW}:{all_MKW}:{state}",
+                f"{data.space_name}:{subpath}:{all_MKW}:{data.action_type}:{all_MKW}",
+                f"{data.space_name}:{subpath}:{all_MKW}:{all_MKW}:{all_MKW}",
+            ])
+            if data.schema_shortname:
+                channels.extend([
+                    f"{data.space_name}:{subpath}:{data.schema_shortname}:{data.action_type}:{state}",
+                    f"{data.space_name}:{subpath}:{data.schema_shortname}:{all_MKW}:{state}",
+                    f"{data.space_name}:{subpath}:{data.schema_shortname}:{data.action_type}:{all_MKW}",
+                    f"{data.space_name}:{subpath}:{data.schema_shortname}:{all_MKW}:{all_MKW}",
+                ])
+            subpath += "/"
+        if not settings.websocket_url:
+            return
+
+        async with AsyncRequest() as client:
+            await client.post(
+                f"{settings.websocket_url}/broadcast-to-channels",
+                json={
+                    "type": "notification_subscription",
+                    "channels": [*set(channels)],
+                    "message": {
+                        "title": "updated",
+                        "subpath": data.subpath,
+                        "space": data.space_name,
+                        "shortname": data.shortname,
+                        "action_type": data.action_type,
+                        "owner_shortname": data.user_shortname
+                    }
+                }                
+            )
+            

dmart/plugins/redis_db_update/config.json

@@ -0,0 +1,13 @@
+{
+  "shortname": "redis_db_update",
+	"is_active": false,
+	"filters": {
+		"subpaths": ["__ALL__"],
+		"resource_types": ["content", "ticket", "permission", "role", "group", "user", "schema", "notification", "folder", "comment", "json", "lock", "media", "alteration", "Relationship"],
+		"schema_shortnames": ["__ALL__"],
+		"actions": ["create", "update", "delete", "move","progress_ticket"]
+	},
+	"type": "hook",
+	"ordinal": 2,
+	"listen_time": "after"
+}