83 lines
2.9 KiB
Python
83 lines
2.9 KiB
Python
"""
|
|
routes/admin_users.py — User management CRUD routes.
|
|
"""
|
|
|
|
import logging
|
|
from flask import Blueprint, render_template, request, redirect, url_for, flash, session
|
|
from models import get_all_users, create_user, update_user, delete_user
|
|
from utils.decorators import admin_required
|
|
|
|
logger = logging.getLogger("routes.admin_users")
|
|
admin_users_bp = Blueprint("admin_users", __name__, url_prefix="/admin/users")
|
|
|
|
|
|
@admin_users_bp.route("/")
|
|
@admin_required
|
|
def users_list():
|
|
users = get_all_users()
|
|
return render_template("admin/users.html", users=users)
|
|
|
|
|
|
@admin_users_bp.route("/create", methods=["POST"])
|
|
@admin_required
|
|
def create():
|
|
admin_id = session["user"]["id"]
|
|
username = request.form.get("username", "").strip()
|
|
password = request.form.get("password", "")
|
|
role = request.form.get("role", "user")
|
|
full_name = request.form.get("full_name", "").strip()
|
|
email = request.form.get("email", "").strip() or None
|
|
|
|
if not username or not password:
|
|
flash("Username and password are required.", "danger")
|
|
return redirect(url_for("admin_users.users_list"))
|
|
|
|
try:
|
|
create_user(admin_id, username, password, role, full_name, email)
|
|
flash(f"User '{username}' created successfully.", "success")
|
|
logger.info(f"User '{username}' created by admin_id={admin_id}.")
|
|
except Exception as e:
|
|
logger.error(f"create_user error: {e}")
|
|
flash(f"Error creating user: {e}", "danger")
|
|
|
|
return redirect(url_for("admin_users.users_list"))
|
|
|
|
|
|
@admin_users_bp.route("/<int:user_id>/edit", methods=["POST"])
|
|
@admin_required
|
|
def edit(user_id):
|
|
admin_id = session["user"]["id"]
|
|
username = request.form.get("username", "").strip()
|
|
role = request.form.get("role", "user")
|
|
full_name = request.form.get("full_name", "").strip()
|
|
email = request.form.get("email", "").strip() or None
|
|
is_active = int(request.form.get("is_active", 1))
|
|
password = request.form.get("password", "").strip() or None
|
|
|
|
try:
|
|
update_user(admin_id, user_id, username, role, full_name, is_active, password, email)
|
|
flash(f"User '{username}' updated successfully.", "success")
|
|
logger.info(f"User id={user_id} updated by admin_id={admin_id}.")
|
|
except Exception as e:
|
|
logger.error(f"update_user error: {e}")
|
|
flash(f"Error updating user: {e}", "danger")
|
|
|
|
return redirect(url_for("admin_users.users_list"))
|
|
|
|
|
|
@admin_users_bp.route("/<int:user_id>/delete", methods=["POST"])
|
|
@admin_required
|
|
def delete(user_id):
|
|
admin_id = session["user"]["id"]
|
|
try:
|
|
delete_user(admin_id, user_id)
|
|
flash("User deleted successfully.", "success")
|
|
logger.info(f"User id={user_id} deleted by admin_id={admin_id}.")
|
|
except ValueError as e:
|
|
flash(str(e), "danger")
|
|
except Exception as e:
|
|
logger.error(f"delete_user error: {e}")
|
|
flash(f"Error deleting user: {e}", "danger")
|
|
|
|
return redirect(url_for("admin_users.users_list"))
|