mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-04-12 13:20:43 -04:00
895a9df55a
This shows the green banner with a tick when cancelling a user's invitation to a service or organisation. The accessibility audit noted that 'When cancelling an invite a new page loads, however, there is no immediate indication that the invite has been cancelled.' In order to display the invited user's email address as part of the flash message, this adds new methods to the api clients for invites to get a single invite.
534 lines
17 KiB
Python
534 lines
17 KiB
Python
from collections import OrderedDict
|
|
from functools import partial
|
|
|
|
from flask import flash, redirect, render_template, request, session, url_for
|
|
from flask_login import current_user
|
|
from notifications_python_client.errors import HTTPError
|
|
from werkzeug.exceptions import abort
|
|
|
|
from app import (
|
|
current_organisation,
|
|
current_service,
|
|
email_branding_client,
|
|
letter_branding_client,
|
|
org_invite_api_client,
|
|
organisations_client,
|
|
user_api_client,
|
|
)
|
|
from app.main import main
|
|
from app.main.forms import (
|
|
AddGPOrganisationForm,
|
|
AddNHSLocalOrganisationForm,
|
|
ConfirmPasswordForm,
|
|
GoLiveNotesForm,
|
|
InviteOrgUserForm,
|
|
NewOrganisationForm,
|
|
OrganisationAgreementSignedForm,
|
|
OrganisationCrownStatusForm,
|
|
OrganisationDomainsForm,
|
|
OrganisationOrganisationTypeForm,
|
|
PreviewBranding,
|
|
RenameOrganisationForm,
|
|
SearchByNameForm,
|
|
SearchUsersForm,
|
|
SetEmailBranding,
|
|
SetLetterBranding,
|
|
)
|
|
from app.main.views.dashboard import (
|
|
get_tuples_of_financial_years,
|
|
requested_and_current_financial_year,
|
|
)
|
|
from app.main.views.service_settings import get_branding_as_value_and_label
|
|
from app.models.organisation import Organisation, Organisations
|
|
from app.models.user import InvitedOrgUser, User
|
|
from app.utils import user_has_permissions, user_is_platform_admin
|
|
|
|
|
|
@main.route("/organisations", methods=['GET'])
|
|
@user_is_platform_admin
|
|
def organisations():
|
|
return render_template(
|
|
'views/organisations/index.html',
|
|
organisations=Organisations(),
|
|
search_form=SearchByNameForm(),
|
|
)
|
|
|
|
|
|
@main.route("/organisations/add", methods=['GET', 'POST'])
|
|
@user_is_platform_admin
|
|
def add_organisation():
|
|
form = NewOrganisationForm()
|
|
|
|
if form.validate_on_submit():
|
|
return redirect(url_for(
|
|
'.organisation_settings',
|
|
org_id=Organisation.create_from_form(form).id,
|
|
))
|
|
|
|
return render_template(
|
|
'views/organisations/add-organisation.html',
|
|
form=form
|
|
)
|
|
|
|
|
|
@main.route('/services/<uuid:service_id>/add-gp-organisation', methods=['GET', 'POST'])
|
|
@user_has_permissions('manage_service')
|
|
def add_organisation_from_gp_service(service_id):
|
|
if (not current_service.organisation_type == Organisation.TYPE_NHS_GP) or current_service.organisation:
|
|
abort(403)
|
|
|
|
form = AddGPOrganisationForm(service_name=current_service.name)
|
|
|
|
if form.validate_on_submit():
|
|
Organisation.create(
|
|
form.get_organisation_name(),
|
|
crown=False,
|
|
organisation_type='nhs_gp',
|
|
agreement_signed=False,
|
|
).associate_service(
|
|
service_id
|
|
)
|
|
return redirect(url_for(
|
|
'.service_agreement',
|
|
service_id=service_id,
|
|
))
|
|
|
|
return render_template(
|
|
'views/organisations/add-gp-organisation.html',
|
|
form=form
|
|
)
|
|
|
|
|
|
@main.route('/services/<uuid:service_id>/add-nhs-local-organisation', methods=['GET', 'POST'])
|
|
@user_has_permissions('manage_service')
|
|
def add_organisation_from_nhs_local_service(service_id):
|
|
if (not current_service.organisation_type == Organisation.TYPE_NHS_LOCAL) or current_service.organisation:
|
|
abort(403)
|
|
|
|
form = AddNHSLocalOrganisationForm(organisation_choices=[
|
|
(organisation.id, organisation.name)
|
|
for organisation in Organisations()
|
|
if organisation.organisation_type == Organisation.TYPE_NHS_LOCAL
|
|
])
|
|
|
|
search_form = SearchByNameForm()
|
|
|
|
if form.validate_on_submit():
|
|
Organisation.from_id(form.organisations.data).associate_service(service_id)
|
|
return redirect(url_for(
|
|
'.service_agreement',
|
|
service_id=service_id,
|
|
))
|
|
|
|
return render_template(
|
|
'views/organisations/add-nhs-local-organisation.html',
|
|
form=form,
|
|
search_form=search_form,
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>", methods=['GET'])
|
|
@user_has_permissions()
|
|
def organisation_dashboard(org_id):
|
|
year, current_financial_year = requested_and_current_financial_year(request)
|
|
services = current_organisation.services_and_usage(
|
|
financial_year=year
|
|
)['services']
|
|
return render_template(
|
|
'views/organisations/organisation/index.html',
|
|
services=services,
|
|
years=get_tuples_of_financial_years(
|
|
partial(url_for, '.organisation_dashboard', org_id=current_organisation.id),
|
|
start=current_financial_year - 1,
|
|
end=current_financial_year + 1,
|
|
),
|
|
selected_year=year,
|
|
search_form=SearchByNameForm() if len(services) > 7 else None,
|
|
**{
|
|
f'total_{key}': sum(service[key] for service in services)
|
|
for key in ('emails_sent', 'sms_cost', 'letter_cost')
|
|
}
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/trial-services", methods=['GET'])
|
|
@user_is_platform_admin
|
|
def organisation_trial_mode_services(org_id):
|
|
return render_template(
|
|
'views/organisations/organisation/trial-mode-services.html',
|
|
search_form=SearchByNameForm(),
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/users", methods=['GET'])
|
|
@user_has_permissions()
|
|
def manage_org_users(org_id):
|
|
return render_template(
|
|
'views/organisations/organisation/users/index.html',
|
|
users=current_organisation.team_members,
|
|
show_search_box=(len(current_organisation.team_members) > 7),
|
|
form=SearchUsersForm(),
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/users/invite", methods=['GET', 'POST'])
|
|
@user_has_permissions()
|
|
def invite_org_user(org_id):
|
|
form = InviteOrgUserForm(
|
|
invalid_email_address=current_user.email_address
|
|
)
|
|
if form.validate_on_submit():
|
|
email_address = form.email_address.data
|
|
invited_org_user = InvitedOrgUser.create(
|
|
current_user.id,
|
|
org_id,
|
|
email_address
|
|
)
|
|
|
|
flash('Invite sent to {}'.format(invited_org_user.email_address), 'default_with_tick')
|
|
return redirect(url_for('.manage_org_users', org_id=org_id))
|
|
|
|
return render_template(
|
|
'views/organisations/organisation/users/invite-org-user.html',
|
|
form=form
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/users/<uuid:user_id>", methods=['GET', 'POST'])
|
|
@user_has_permissions()
|
|
def edit_user_org_permissions(org_id, user_id):
|
|
return render_template(
|
|
'views/organisations/organisation/users/user/index.html',
|
|
user=User.from_id(user_id)
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/users/<uuid:user_id>/delete", methods=['GET', 'POST'])
|
|
@user_has_permissions()
|
|
def remove_user_from_organisation(org_id, user_id):
|
|
user = User.from_id(user_id)
|
|
if request.method == 'POST':
|
|
try:
|
|
organisations_client.remove_user_from_organisation(org_id, user_id)
|
|
except HTTPError as e:
|
|
msg = "You cannot remove the only user for a service"
|
|
if e.status_code == 400 and msg in e.message:
|
|
flash(msg, 'info')
|
|
return redirect(url_for(
|
|
'.manage_org_users',
|
|
org_id=org_id))
|
|
else:
|
|
abort(500, e)
|
|
|
|
return redirect(url_for(
|
|
'.manage_org_users',
|
|
org_id=org_id
|
|
))
|
|
|
|
flash('Are you sure you want to remove {}?'.format(user.name), 'remove')
|
|
return render_template(
|
|
'views/organisations/organisation/users/user/index.html',
|
|
user=user,
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/cancel-invited-user/<uuid:invited_user_id>", methods=['GET'])
|
|
@user_has_permissions()
|
|
def cancel_invited_org_user(org_id, invited_user_id):
|
|
org_invite_api_client.cancel_invited_user(org_id=org_id, invited_user_id=invited_user_id)
|
|
|
|
invited_org_user = InvitedOrgUser.by_id_and_org_id(org_id, invited_user_id)
|
|
|
|
flash(f'Invitation cancelled for {invited_org_user.email_address}', 'default_with_tick')
|
|
return redirect(url_for('main.manage_org_users', org_id=org_id))
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/settings/", methods=['GET'])
|
|
@user_is_platform_admin
|
|
def organisation_settings(org_id):
|
|
return render_template(
|
|
'views/organisations/organisation/settings/index.html',
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/settings/edit-name", methods=['GET', 'POST'])
|
|
@user_is_platform_admin
|
|
def edit_organisation_name(org_id):
|
|
form = RenameOrganisationForm()
|
|
|
|
if request.method == 'GET':
|
|
form.name.data = current_organisation.name
|
|
|
|
if form.validate_on_submit():
|
|
unique_name = organisations_client.is_organisation_name_unique(org_id, form.name.data)
|
|
if not unique_name:
|
|
form.name.errors.append("This organisation name is already in use")
|
|
return render_template('views/organisations/organisation/settings/edit-name/index.html', form=form)
|
|
session['organisation_name_change'] = form.name.data
|
|
return redirect(url_for('.confirm_edit_organisation_name', org_id=org_id))
|
|
|
|
return render_template(
|
|
'views/organisations/organisation/settings/edit-name/index.html',
|
|
form=form,
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/settings/edit-type", methods=['GET', 'POST'])
|
|
@user_is_platform_admin
|
|
def edit_organisation_type(org_id):
|
|
|
|
form = OrganisationOrganisationTypeForm(
|
|
organisation_type=current_organisation.organisation_type
|
|
)
|
|
|
|
if form.validate_on_submit():
|
|
current_organisation.update(
|
|
organisation_type=form.organisation_type.data,
|
|
delete_services_cache=True,
|
|
)
|
|
return redirect(url_for('.organisation_settings', org_id=org_id))
|
|
|
|
return render_template(
|
|
'views/organisations/organisation/settings/edit-type.html',
|
|
form=form,
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/settings/edit-crown-status", methods=['GET', 'POST'])
|
|
@user_is_platform_admin
|
|
def edit_organisation_crown_status(org_id):
|
|
|
|
form = OrganisationCrownStatusForm(
|
|
crown_status={
|
|
True: 'crown',
|
|
False: 'non-crown',
|
|
None: 'unknown',
|
|
}.get(current_organisation.crown)
|
|
)
|
|
|
|
if form.validate_on_submit():
|
|
organisations_client.update_organisation(
|
|
current_organisation.id,
|
|
crown={
|
|
'crown': True,
|
|
'non-crown': False,
|
|
'unknown': None,
|
|
}.get(form.crown_status.data),
|
|
)
|
|
return redirect(url_for('.organisation_settings', org_id=org_id))
|
|
|
|
return render_template(
|
|
'views/organisations/organisation/settings/edit-crown-status.html',
|
|
form=form,
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/settings/edit-agreement", methods=['GET', 'POST'])
|
|
@user_is_platform_admin
|
|
def edit_organisation_agreement(org_id):
|
|
|
|
form = OrganisationAgreementSignedForm(
|
|
agreement_signed={
|
|
True: 'yes',
|
|
False: 'no',
|
|
None: 'unknown',
|
|
}.get(current_organisation.agreement_signed)
|
|
)
|
|
|
|
if form.validate_on_submit():
|
|
organisations_client.update_organisation(
|
|
current_organisation.id,
|
|
agreement_signed={
|
|
'yes': True,
|
|
'no': False,
|
|
'unknown': None,
|
|
}.get(form.agreement_signed.data),
|
|
)
|
|
return redirect(url_for('.organisation_settings', org_id=org_id))
|
|
|
|
return render_template(
|
|
'views/organisations/organisation/settings/edit-agreement.html',
|
|
form=form,
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/settings/set-email-branding", methods=['GET', 'POST'])
|
|
@user_is_platform_admin
|
|
def edit_organisation_email_branding(org_id):
|
|
|
|
email_branding = email_branding_client.get_all_email_branding()
|
|
|
|
form = SetEmailBranding(
|
|
all_branding_options=get_branding_as_value_and_label(email_branding),
|
|
current_branding=current_organisation.email_branding_id,
|
|
)
|
|
|
|
if form.validate_on_submit():
|
|
return redirect(url_for(
|
|
'.organisation_preview_email_branding',
|
|
org_id=org_id,
|
|
branding_style=form.branding_style.data,
|
|
))
|
|
|
|
return render_template(
|
|
'views/organisations/organisation/settings/set-email-branding.html',
|
|
form=form,
|
|
search_form=SearchByNameForm()
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/settings/preview-email-branding", methods=['GET', 'POST'])
|
|
@user_is_platform_admin
|
|
def organisation_preview_email_branding(org_id):
|
|
|
|
branding_style = request.args.get('branding_style', None)
|
|
|
|
form = PreviewBranding(branding_style=branding_style)
|
|
|
|
if form.validate_on_submit():
|
|
current_organisation.update(
|
|
email_branding_id=form.branding_style.data,
|
|
delete_services_cache=True,
|
|
)
|
|
return redirect(url_for('.organisation_settings', org_id=org_id))
|
|
|
|
return render_template(
|
|
'views/organisations/organisation/settings/preview-email-branding.html',
|
|
form=form,
|
|
action=url_for('main.organisation_preview_email_branding', org_id=org_id),
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/settings/set-letter-branding", methods=['GET', 'POST'])
|
|
@user_is_platform_admin
|
|
def edit_organisation_letter_branding(org_id):
|
|
letter_branding = letter_branding_client.get_all_letter_branding()
|
|
|
|
form = SetLetterBranding(
|
|
all_branding_options=get_branding_as_value_and_label(letter_branding),
|
|
current_branding=current_organisation.letter_branding_id,
|
|
)
|
|
|
|
if form.validate_on_submit():
|
|
return redirect(url_for(
|
|
'.organisation_preview_letter_branding',
|
|
org_id=org_id,
|
|
branding_style=form.branding_style.data,
|
|
))
|
|
|
|
return render_template(
|
|
'views/organisations/organisation/settings/set-letter-branding.html',
|
|
form=form,
|
|
search_form=SearchByNameForm()
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/settings/preview-letter-branding", methods=['GET', 'POST'])
|
|
@user_is_platform_admin
|
|
def organisation_preview_letter_branding(org_id):
|
|
branding_style = request.args.get('branding_style')
|
|
|
|
form = PreviewBranding(branding_style=branding_style)
|
|
|
|
if form.validate_on_submit():
|
|
current_organisation.update(
|
|
letter_branding_id=form.branding_style.data,
|
|
delete_services_cache=True,
|
|
)
|
|
return redirect(url_for('.organisation_settings', org_id=org_id))
|
|
|
|
return render_template(
|
|
'views/organisations/organisation/settings/preview-letter-branding.html',
|
|
form=form,
|
|
action=url_for('main.organisation_preview_letter_branding', org_id=org_id),
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/settings/edit-organisation-domains", methods=['GET', 'POST'])
|
|
@user_is_platform_admin
|
|
def edit_organisation_domains(org_id):
|
|
|
|
form = OrganisationDomainsForm()
|
|
|
|
if form.validate_on_submit():
|
|
try:
|
|
organisations_client.update_organisation(
|
|
org_id,
|
|
domains=list(OrderedDict.fromkeys(
|
|
domain.lower()
|
|
for domain in filter(None, form.domains.data)
|
|
)),
|
|
)
|
|
except HTTPError as e:
|
|
error_message = "Domain already exists"
|
|
if e.status_code == 400 and error_message in e.message:
|
|
flash("This domain is already in use", "error")
|
|
return render_template(
|
|
'views/organisations/organisation/settings/edit-domains.html',
|
|
form=form,
|
|
)
|
|
else:
|
|
raise e
|
|
return redirect(url_for('.organisation_settings', org_id=org_id))
|
|
|
|
form.populate(current_organisation.domains)
|
|
|
|
return render_template(
|
|
'views/organisations/organisation/settings/edit-domains.html',
|
|
form=form,
|
|
)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/settings/edit-name/confirm", methods=['GET', 'POST'])
|
|
@user_has_permissions()
|
|
def confirm_edit_organisation_name(org_id):
|
|
# Validate password for form
|
|
def _check_password(pwd):
|
|
return user_api_client.verify_password(current_user.id, pwd)
|
|
|
|
form = ConfirmPasswordForm(_check_password)
|
|
|
|
if form.validate_on_submit():
|
|
try:
|
|
organisations_client.update_organisation_name(
|
|
current_organisation.id,
|
|
name=session['organisation_name_change'],
|
|
)
|
|
except HTTPError as e:
|
|
error_msg = "Organisation name already exists"
|
|
if e.status_code == 400 and error_msg in e.message:
|
|
# Redirect the user back to the change organisation name screen
|
|
flash('This organisation name is already in use', 'error')
|
|
return redirect(url_for('main.edit_organisation_name', org_id=org_id))
|
|
else:
|
|
raise e
|
|
else:
|
|
session.pop('organisation_name_change')
|
|
return redirect(url_for('.organisation_settings', org_id=org_id))
|
|
return render_template(
|
|
'views/organisations/organisation/settings/edit-name/confirm.html',
|
|
new_name=session['organisation_name_change'],
|
|
form=form)
|
|
|
|
|
|
@main.route("/organisations/<uuid:org_id>/settings/edit-go-live-notes", methods=['GET', 'POST'])
|
|
@user_is_platform_admin
|
|
def edit_organisation_go_live_notes(org_id):
|
|
|
|
form = GoLiveNotesForm()
|
|
|
|
if form.validate_on_submit():
|
|
organisations_client.update_organisation(
|
|
org_id,
|
|
request_to_go_live_notes=form.request_to_go_live_notes.data
|
|
)
|
|
return redirect(url_for('.organisation_settings', org_id=org_id))
|
|
|
|
org = organisations_client.get_organisation(org_id)
|
|
form.request_to_go_live_notes.data = org['request_to_go_live_notes']
|
|
|
|
return render_template(
|
|
'views/organisations/organisation/settings/edit-go-live-notes.html',
|
|
form=form,
|
|
)
|