from account.decorators import login_required from file.models import File from folder.models import Folder from .judgement_function import judge_filepath from account.models import get_user from utils.debug import debug_view from utils.http import make_json_response from utils.permission import can_delete from utils.crypto import secure_transport import base64 # Create your views here. @secure_transport # @debug_view(template_name='upload_file.html') @login_required def upload_file(request): data = request.POST user = get_user(request) key = data.get('key') file_b64 = data.get('file_b64') file_name = data.get('file_name') file_type = judge_filepath(file_name.split('.')[-1].lower()) if '.' in file_name else '' father_folder_id = data.get('father_folder_id') try: folder = Folder.objects.get(folder_id=father_folder_id) except: return make_json_response(code=402, error='文件夹不存在') if not folder.check_permission(user=user): return make_json_response(code=404, error='没有上传文件的权限') file = File.objects.create(file_name=file_name, father_folder=folder, file_type=file_type, owner=user, group=folder.group, key=key) try: file_path = file.get_path() f = open(file_path, 'wb+') f.write(base64.b64decode(file_b64)) f.close() except: file.delete() return make_json_response(code=500, error='文件保存失败') return make_json_response() @secure_transport # @debug_view('file_id') @login_required def download_file(request): user = get_user(request) file_id = request.POST.get('file_id') try: file = File.objects.get(file_id=file_id) except: return make_json_response(code=402, error='文件不存在') if not file.father_folder.check_permission(user=user): return make_json_response(code=404, error='没有下载文件的权限') try: file_path = file.get_path() f = open(file_path, 'rb') file_b64 = base64.b64encode(f.read()) f.close() except: return make_json_response(code=500, error='文件读取失败') return make_json_response(file_b64=file_b64, **file.to_json()) @secure_transport # @debug_view('file_id') @login_required def delete_file(request): data = request.POST user = get_user(request) file_id = data.get('file_id') try: file = File.objects.get(file_id=file_id) except: return make_json_response(code=402, error='文件不存在') if not can_delete(user=user, f=file): return make_json_response(code=404, error='没有删除文件的权限') file.delete() return make_json_response()