Users CRUD

app/main.py

@@ -12,7 +12,7 @@ from flask import (
 )
 from flask_login import login_user, current_user, logout_user, login_required
 from werkzeug.urls import url_parse
-from .forms import LoginForm
+from .forms import LoginForm, UserForm
 from .models import User, Benchmark, db
 
 main = Blueprint("main", __name__)
@@ -74,6 +74,8 @@ def login():
             flash("Invalid username or password", "danger")
             return redirect(url_for("main.login"))
         login_user(user, remember=form.remember_me.data)
+        user.last_login = db.func.now()
+        db.session.commit()
         flash("Logged in successfully.")
         next_page = request.args.get("next")
         if not next_page or url_parse(next_page).netloc != "":
@@ -84,5 +86,103 @@ def login():
 
 @main.route("/logout")
 def logout():
-    logout_user()
+    if current_user.is_authenticated:
+        logout_user()
     return redirect(url_for(INDEX))
+
+
+@main.route("/users")
+@login_required
+def users():
+    if not current_user.admin:
+        flash("You are not an admin.", "danger")
+        return redirect(url_for(INDEX))
+    users = User.query.all()
+    return render_template("users.html", users=users)
+
+
+@main.route("/user_edit/<user_id>", methods=["GET", "POST"])
+@login_required
+def user_edit(user_id):
+    if user_id != current_user.id and not current_user.admin:
+        flash("You are not an admin.", "danger")
+        return redirect(url_for(INDEX))
+    form = UserForm(obj=User.query.filter_by(id=user_id).first())
+    form.benchmark_id.choices = [
+        (b.id, b.name) for b in Benchmark.query.order_by("name")
+    ]
+    del form.password
+    del form.password2
+    form.user_id = user_id
+    form.submit.label.text = "Edit User"
+    if form.validate_on_submit():
+        form.populate_obj(User.query.filter_by(id=user_id).first())
+        db.session.commit()
+        flash("User edited successfully.")
+        return redirect(url_for("main.users"))
+    return render_template(
+        "user.html",
+        form=form,
+        alert_type="primary",
+        title="Edit User",
+    )
+
+
+@main.route("/user_delete/<user_id>", methods=["GET", "POST"])
+@login_required
+def user_delete(user_id):
+    if user_id != current_user.id and not current_user.admin:
+        flash("You are not an admin.", "danger")
+        return redirect(url_for(INDEX))
+    user = User.query.filter_by(id=user_id).first()
+    form = UserForm(obj=user)
+    del form.password
+    del form.password2
+    for field in form:
+        if field.type != "SubmitField" and field.type != "CSRFTokenField":
+            if field.type == "SelectField" or field.type == "BooleanField":
+                field.render_kw = {"disabled": True}
+            else:
+                field.render_kw = {"readonly": True}
+
+    form.benchmark_id.choices = [
+        (b.id, b.name) for b in Benchmark.query.order_by("name")
+    ]
+    form.submit.label.text = "Delete User"
+    form.user_id = user_id
+    if form.validate_on_submit():
+        flash("User deleted successfully.")
+        db.session.delete(user)
+        db.session.commit()
+        return redirect(url_for("main.users"))
+    return render_template(
+        "user.html",
+        form=form,
+        alert_type="danger",
+        title="Delete User",
+    )
+
+
+@main.route("/user_new", methods=["GET", "POST"])
+@login_required
+def user_new():
+    if not current_user.admin:
+        flash("You are not an admin.", "danger")
+        return redirect(url_for(INDEX))
+    form = UserForm()
+    user = User()
+    form.user_id = None
+    form.benchmark_id.choices = [
+        (b.id, b.name) for b in Benchmark.query.order_by("name")
+    ]
+    form.submit.label.text = "New User"
+    if form.validate_on_submit():
+        form.populate_obj(user)
+        user.set_password(form.password.data)
+        db.session.add(user)
+        db.session.commit()
+        flash("User created successfully.")
+        return redirect(url_for("main.users"))
+    return render_template(
+        "user.html", form=form, alert_type="info", title="New User"
+    )