js/UserView.js

   1 Ext.define('pmg-users', {
   2     extend: 'Ext.data.Model',
   3     fields: [
   4         'userid', 'firstname', 'lastname', 'email', 'comment',
   5         'role', 'keys', 'realm', 'totp-lock',
   6         { type: 'boolean', name: 'enable' },
   7         { type: 'date', dateFormat: 'timestamp', name: 'expire' },
   8     ],
   9     proxy: {
  10         type: 'proxmox',
  11         url: "/api2/json/access/users",
  12     },
  13     idProperty: 'userid',
  14 });
  15
  16 Ext.define('PMG.UserView', {
  17     extend: 'Ext.grid.GridPanel',
  18     alias: 'widget.pmgUserView',
  19
  20     store: {
  21         autoLoad: true,
  22         model: 'pmg-users',
  23         sorters: [
  24             {
  25                 property: 'realm',
  26                 direction: 'ASC',
  27             },
  28             {
  29                 property: 'userid',
  30                 direction: 'ASC',
  31             },
  32         ],
  33     },
  34
  35     controller: {
  36
  37         xclass: 'Ext.app.ViewController',
  38
  39         init: function(view) {
  40             Proxmox.Utils.monStoreErrors(view, view.store);
  41         },
  42
  43         renderUsername: function(userid) {
  44             return Ext.htmlEncode(userid.match(/^(.+)(@[^@]+)$/)[1]);
  45         },
  46
  47         renderFullName: function(firstname, metaData, record) {
  48             var first = firstname || '';
  49             var last = record.data.lastname || '';
  50             return Ext.htmlEncode(first + " " + last);
  51         },
  52
  53         onAdd: function() {
  54             var view = this.getView();
  55
  56             var win = Ext.create('PMG.UserEdit', {});
  57             win.on('destroy', function() { view.reload(); });
  58             win.show();
  59         },
  60
  61         onEdit: function() {
  62             var view = this.getView();
  63
  64             var rec = view.selModel.getSelection()[0];
  65
  66             var win = Ext.create('PMG.UserEdit', {
  67                 userid: rec.data.userid,
  68             });
  69             win.on('destroy', function() { view.reload(); });
  70             win.show();
  71         },
  72
  73         onPassword: function(btn, event, rec) {
  74             var view = this.getView();
  75
  76             var win = Ext.create('Proxmox.window.PasswordEdit', {
  77                 userid: rec.data.userid,
  78             });
  79             win.on('destroy', function() { view.reload(); });
  80             win.show();
  81         },
  82
  83         onAfterRemove: function(btn, res) {
  84             var view = this.getView();
  85             view.reload();
  86         },
  87
  88         onUnlockTfa: function(btn, event, rec) {
  89             let me = this;
  90             let view = me.getView();
  91             Ext.Msg.confirm(
  92                 Ext.String.format(gettext('Unlock TFA authentication for {0}'), rec.data.userid),
  93                 gettext("Locked 2nd factors can happen if the user's password was leaked. Are you sure you want to unlock the user?"),
  94                 function(btn_response) {
  95                     if (btn_response === 'yes') {
  96                         Proxmox.Utils.API2Request({
  97                             url: `/access/users/${rec.data.userid}/unlock-tfa`,
  98                             waitMsgTarget: view,
  99                             method: 'PUT',
 100                             failure: function(response, options) {
 101                                 Ext.Msg.alert(gettext('Error'), response.htmlStatus);
 102                             },
 103                             success: function(response, options) {
 104                                 view.reload();
 105                             },
 106                         });
 107                     }
 108                 },
 109             );
 110         },
 111     },
 112
 113     listeners: {
 114         scope: 'controller',
 115         itemdblclick: 'onEdit',
 116     },
 117
 118     tbar: [
 119         {
 120             text: gettext('Add'),
 121             reference: 'addBtn',
 122             handler: 'onAdd',
 123         },
 124         '-',
 125         {
 126             xtype: 'proxmoxButton',
 127             text: gettext('Edit'),
 128             disabled: true,
 129             handler: 'onEdit',
 130         },
 131         {
 132             xtype: 'proxmoxStdRemoveButton',
 133             baseurl: '/access/users',
 134             reference: 'removeBtn',
 135             callback: 'onAfterRemove',
 136             waitMsgTarget: true,
 137         },
 138         {
 139             xtype: 'proxmoxButton',
 140             text: gettext('Password'),
 141             disabled: true,
 142             handler: 'onPassword',
 143         },
 144         '-',
 145         {
 146             xtype: 'proxmoxButton',
 147             text: gettext('Unlock TFA'),
 148             handler: 'onUnlockTfa',
 149             disabled: true,
 150             enableFn: ({ data }) =>
 151                 data['totp-locked'] || (data['tfa-locked-until'] > (new Date().getTime() / 1000)),
 152         },
 153     ],
 154
 155     columns: [
 156         {
 157             header: gettext('User name'),
 158             width: 200,
 159             sortable: true,
 160             renderer: 'renderUsername',
 161             dataIndex: 'userid',
 162         },
 163         {
 164             header: gettext('Realm'),
 165             width: 100,
 166             sortable: true,
 167             dataIndex: 'realm',
 168         },
 169         {
 170             header: gettext('Role'),
 171             width: 150,
 172             sortable: true,
 173             renderer: PMG.Utils.format_user_role,
 174             dataIndex: 'role',
 175         },
 176         {
 177             header: gettext('Enabled'),
 178             width: 80,
 179             sortable: true,
 180             renderer: Proxmox.Utils.format_boolean,
 181             dataIndex: 'enable',
 182         },
 183         {
 184             header: gettext('Expire'),
 185             width: 80,
 186             sortable: true,
 187             renderer: Proxmox.Utils.format_expire,
 188             dataIndex: 'expire',
 189         },
 190         {
 191             header: gettext('Name'),
 192             width: 150,
 193             sortable: true,
 194             renderer: 'renderFullName',
 195             dataIndex: 'firstname',
 196         },
 197         {
 198             header: gettext('TFA Lock'),
 199             width: 120,
 200             sortable: true,
 201             dataIndex: 'totp-locked',
 202             renderer: function(v, metaData, record) {
 203                 let locked_until = record.data['tfa-locked-until'];
 204                 if (locked_until !== undefined) {
 205                     let now = new Date().getTime() / 1000;
 206                     if (locked_until > now) {
 207                         return gettext('Locked');
 208                     }
 209                 }
 210
 211                 if (record.data['totp-locked']) {
 212                     return gettext('TOTP Locked');
 213                 }
 214
 215                 return Proxmox.Utils.noText;
 216             },
 217         },
 218         {
 219             header: gettext('Comment'),
 220             sortable: false,
 221             renderer: Ext.String.htmlEncode,
 222             dataIndex: 'comment',
 223             flex: 1,
 224         },
 225     ],
 226
 227     reload: function() {
 228         var me = this;
 229
 230         me.store.load();
 231     },
 232 });