04/30 Web Checker web app ver. 1.0

routes/admin_users.py

@@ -0,0 +1,82 @@
+"""
+routes/admin_users.py — User management CRUD routes.
+"""
+
+import logging
+from flask import Blueprint, render_template, request, redirect, url_for, flash, session
+from models import get_all_users, create_user, update_user, delete_user
+from utils.decorators import admin_required
+
+logger = logging.getLogger("routes.admin_users")
+admin_users_bp = Blueprint("admin_users", __name__, url_prefix="/admin/users")
+
+
+@admin_users_bp.route("/")
+@admin_required
+def users_list():
+    users = get_all_users()
+    return render_template("admin/users.html", users=users)
+
+
+@admin_users_bp.route("/create", methods=["POST"])
+@admin_required
+def create():
+    admin_id  = session["user"]["id"]
+    username  = request.form.get("username", "").strip()
+    password  = request.form.get("password", "")
+    role      = request.form.get("role", "user")
+    full_name = request.form.get("full_name", "").strip()
+    email     = request.form.get("email", "").strip() or None
+
+    if not username or not password:
+        flash("Username and password are required.", "danger")
+        return redirect(url_for("admin_users.users_list"))
+
+    try:
+        create_user(admin_id, username, password, role, full_name, email)
+        flash(f"User '{username}' created successfully.", "success")
+        logger.info(f"User '{username}' created by admin_id={admin_id}.")
+    except Exception as e:
+        logger.error(f"create_user error: {e}")
+        flash(f"Error creating user: {e}", "danger")
+
+    return redirect(url_for("admin_users.users_list"))
+
+
+@admin_users_bp.route("/<int:user_id>/edit", methods=["POST"])
+@admin_required
+def edit(user_id):
+    admin_id  = session["user"]["id"]
+    username  = request.form.get("username", "").strip()
+    role      = request.form.get("role", "user")
+    full_name = request.form.get("full_name", "").strip()
+    email     = request.form.get("email", "").strip() or None
+    is_active = int(request.form.get("is_active", 1))
+    password  = request.form.get("password", "").strip() or None
+
+    try:
+        update_user(admin_id, user_id, username, role, full_name, is_active, password, email)
+        flash(f"User '{username}' updated successfully.", "success")
+        logger.info(f"User id={user_id} updated by admin_id={admin_id}.")
+    except Exception as e:
+        logger.error(f"update_user error: {e}")
+        flash(f"Error updating user: {e}", "danger")
+
+    return redirect(url_for("admin_users.users_list"))
+
+
+@admin_users_bp.route("/<int:user_id>/delete", methods=["POST"])
+@admin_required
+def delete(user_id):
+    admin_id = session["user"]["id"]
+    try:
+        delete_user(admin_id, user_id)
+        flash("User deleted successfully.", "success")
+        logger.info(f"User id={user_id} deleted by admin_id={admin_id}.")
+    except ValueError as e:
+        flash(str(e), "danger")
+    except Exception as e:
+        logger.error(f"delete_user error: {e}")
+        flash(f"Error deleting user: {e}", "danger")
+
+    return redirect(url_for("admin_users.users_list"))