admin edit account

june/account/forms.py

@@ -1,15 +1,15 @@
 from flask import g
 from flask.ext.wtf import Form
-from flask.ext.wtf import TextField, PasswordField, TextAreaField
-from flask.ext.wtf import Required, Email, URL, Optional
+from flask.ext.wtf import TextField, PasswordField, TextAreaField, IntegerField
+from flask.ext.wtf import Required, Email, URL, Optional, Length
 from flask.ext.wtf.html5 import EmailField, URLField
 from flask.ext.babel import lazy_gettext as _
 from .models import db, Member
 
 
 class SignupForm(Form):
     username = TextField(
-        _('Username'), validators=[Required()]
+        _('Username'), validators=[Required(), Length(min=3, max=20)],
     )
     email = EmailField(
         _('Email'), validators=[Required(), Email()]
@@ -55,7 +55,7 @@ def validate_password(self, field):
 
 class SettingForm(Form):
     username = TextField(
-        _('Username'), validators=[Required()]
+        _('Username'), validators=[Required(), Length(min=3, max=20)],
     )
     website = URLField(
         _('Website'), validators=[Optional(), URL()]
@@ -75,3 +75,27 @@ def save(self):
         db.session.add(user)
         db.session.commit()
         return user
+
+
+class EditForm(Form):
+    username = TextField(
+        _('Username'), validators=[Required(), Length(min=3, max=20)],
+    )
+    email = EmailField(
+        _('Email'), validators=[Required(), Email()]
+    )
+    role = IntegerField(_('Role'), default=2)
+    edit_username_count = IntegerField(
+        _('Chance'), default=2, description=_('Chance to edit username'),
+    )
+    description = TextAreaField(
+        _('Description'),
+    )
+
+    def save(self, user):
+        for name, data in self.data.iteritems():
+            setattr(user, name, data)
+
+        db.session.add(user)
+        db.session.commit()
+        return user

june/account/models.py

@@ -62,3 +62,13 @@ def check_password(self, raw):
         passwd = '%s%s%s' % (salt, raw, db.app.config['PASSWORD_SECRET'])
         verify = hashlib.sha1(passwd).hexdigest()
         return verify == hsh
+
+    def is_admin(self):
+        if self.id == 1:
+            return True
+        return self.role > 9
+
+    def is_staff(self):
+        if self.id == 1:
+            return True
+        return self.role > 6

june/account/views.py

@@ -4,9 +4,10 @@
 from flask import flash
 from flask import g
 from flask.ext.babel import gettext as _
-from .forms import SigninForm, SignupForm, SettingForm
+from .forms import SigninForm, SignupForm, SettingForm, EditForm
+from .models import Member
 from .helpers import login, logout
-from .decorators import require_login
+from .decorators import require_login, require_admin
 
 app = Blueprint('account', __name__)
 
@@ -49,3 +50,14 @@ def setting():
         flash(_('Account has been updated'), 'info')
         return redirect(url_for('.setting'))
     return render_template('account/setting.html', form=form)
+
+
+@app.route('/edit/<username>', methods=['GET', 'POST'])
+@require_admin
+def edit(username):
+    user = Member.query.filter_by(username=username).first_or_404()
+    form = EditForm(obj=user)
+    if form.validate_on_submit():
+        form.save(user)
+        return redirect(url_for('.edit', username=username))
+    return render_template('account/edit.html', form=form)

june/templates/account/edit.html

@@ -0,0 +1,15 @@
+{% extends "layout.html" %}
+{% from "snippet/macros.html" import render_field, render_submit %}
+
+{% block content %}
+<form class="fm-form" method="post" action="">
+  {{ form.csrf_token }}
+  {{ render_field(form.username) }}
+  {{ render_field(form.email) }}
+  {{ render_field(form.role) }}
+  {{ render_field(form.edit_username_count) }}
+  {{ render_field(form.description, 'fm-textarea') }}
+
+  {{ render_submit(_("Update")) }}
+</form>
+{% endblock %}