admin_manage_users.go

package controller

import (
	"github.com/JohanAanesen/CSAMS/webservice/service"
	"github.com/JohanAanesen/CSAMS/webservice/shared/db"
	"github.com/JohanAanesen/CSAMS/webservice/shared/session"
	"github.com/JohanAanesen/CSAMS/webservice/shared/view"
	"log"
	"net/http"
	"strconv"
	"strings"
)

// AdminChangePassGET serves the change password for students page and changes password if it's variables in the url
func AdminChangePassGET(w http.ResponseWriter, r *http.Request) {

	// Services
	services := service.NewServices(db.GetDB())

	// Get form value
	vars := r.FormValue("vars")

	// Get current user
	currentUser := session.GetUserFromSession(r)

	// Remove user from course
	userid := r.FormValue("removeVars")
	if userid != "" {
		array := strings.Split(userid, "§")
		if len(array) != 2 {
			ErrorHandler(w, r, http.StatusInternalServerError)
			log.Println("error: not enough arguments in url!")
			return
		}

		// Get userid and convert to int
		uid, err := strconv.Atoi(array[0])
		if err != nil {
			log.Println("string convert atoi array[0]", err.Error())
			ErrorHandler(w, r, http.StatusInternalServerError)
			return
		}

		// Get courseid and convert to int
		cid, err := strconv.Atoi(array[1])
		if err != nil {
			log.Println("string convert atoi array[1]", err.Error())
			ErrorHandler(w, r, http.StatusInternalServerError)
			return
		}

		// Remove user from course
		err = services.Course.RemoveUser(uid, cid)
		if err != nil {
			ErrorHandler(w, r, http.StatusInternalServerError)
			log.Println(err.Error())
			return
		}

		// Log removal of user from course
		err = services.Logs.InsertAdminRemoveUserFromCourse(currentUser.ID, cid, uid)
		if err != nil {
			log.Println("log, admin remove user from course")
			ErrorHandler(w, r, http.StatusInternalServerError)
			return
		}
	}

	// Only change password if vars is not empty
	if vars != "" {
		array := strings.Split(vars, "§")

		// Not enough arguments to change password
		if len(array) != 2 {
			ErrorHandler(w, r, http.StatusInternalServerError)
			log.Println("error: not enough arguments in url!")
			return
		}

		// Get password
		pass := array[0]

		// Get id and convert to int
		id, err := strconv.Atoi(array[1])
		if err != nil {
			log.Println("string convert atoi array[1]", err.Error())
			ErrorHandler(w, r, http.StatusInternalServerError)
			return
		}

		// Update users password
		err = services.User.UpdatePassword(id, pass)
		if err != nil {
			log.Println("update user password", err.Error())
			ErrorHandler(w, r, http.StatusInternalServerError)
			return
		}

		// Log change users password
		err = services.Logs.InsertAdminChangeUserPassword(currentUser.ID, id)
		if err != nil {
			log.Println("log, admin change users password")
			ErrorHandler(w, r, http.StatusInternalServerError)
			return
		}
	}

	// Get courses
	courses, err := services.Course.FetchAllForUserOrdered(session.GetUserFromSession(r).ID)
	if err != nil {
		log.Println("get all courses to user sorted", err)
		ErrorHandler(w, r, http.StatusInternalServerError)
		return
	}

	w.Header().Set("Content-Type", "text/html; charset=utf-8")
	w.WriteHeader(http.StatusOK)

	v := view.New(r)
	v.Name = "admin/managestudents/index"
	v.Vars["Courses"] = courses

	v.Render(w)
}

// AdminGetUsersPOST serves the same page as above, but with the list of all students in a course
func AdminGetUsersPOST(w http.ResponseWriter, r *http.Request) {

	// Services
	services := service.NewServices(db.GetDB())

	// Get form value
	formVal := r.FormValue("course_id")

	// If courseID is blank, give error
	if formVal == "" {
		log.Println("error: course_id is nil")
		ErrorHandler(w, r, http.StatusInternalServerError)
		return
	}

	// Convert courseID to int
	courseID, err := strconv.Atoi(formVal)
	if err != nil {
		log.Println("string convert atoi form value", err.Error())
		ErrorHandler(w, r, http.StatusInternalServerError)
		return
	}

	// Get all students from courseID
	students, err := services.User.FetchAllFromCourse(courseID)
	if len(students) < 0 || err != nil {
		log.Println("Error: could not get students from course! (admin_change_pass.go)")
		ErrorHandler(w, r, http.StatusInternalServerError)
		return
	}

	// Get current user
	currentUser := session.GetUserFromSession(r)

	// Get courses
	courses, err := services.Course.FetchAllForUserOrdered(currentUser.ID)
	if err != nil {
		ErrorHandler(w, r, http.StatusInternalServerError)
		log.Println(err)
		return
	}

	// Header OK
	w.Header().Set("Content-Type", "text/html; charset=utf-8")
	w.WriteHeader(http.StatusOK)

	v := view.New(r)
	v.Name = "admin/managestudents/index"
	v.Vars["Courses"] = courses         // Send the courses back that the admin is teacher in
	v.Vars["Students"] = students       // Send the students in course with courseID
	v.Vars["SelectedCourse"] = courseID // Send the selected course back to fill dropdown

	v.Render(w)

}