baseviews.py 48 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457
  1. from datetime import date, datetime
  2. from inspect import isclass
  3. import json
  4. import logging
  5. import re
  6. from typing import List, Optional, TYPE_CHECKING
  7. from flask import (
  8. abort,
  9. Blueprint,
  10. current_app,
  11. flash,
  12. render_template,
  13. request,
  14. session,
  15. url_for,
  16. )
  17. from ._compat import as_unicode
  18. from .actions import ActionItem
  19. from .const import PERMISSION_PREFIX
  20. from .forms import GeneralModelConverter
  21. from .hooks import get_before_request_hooks, wrap_route_handler_with_hooks
  22. from .urltools import (
  23. get_filter_args,
  24. get_order_args,
  25. get_page_args,
  26. get_page_size_args,
  27. Stack,
  28. )
  29. from .widgets import FormWidget, ListWidget, SearchWidget, ShowWidget
  30. if TYPE_CHECKING:
  31. from flask_appbuilder.base import AppBuilder
  32. log = logging.getLogger(__name__)
  33. def expose(url="/", methods=("GET",)):
  34. """
  35. Use this decorator to expose views on your view classes.
  36. :param url:
  37. Relative URL for the view
  38. :param methods:
  39. Allowed HTTP methods. By default only GET is allowed.
  40. """
  41. def wrap(f):
  42. if not hasattr(f, "_urls"):
  43. f._urls = []
  44. f._urls.append((url, methods))
  45. return f
  46. return wrap
  47. def expose_api(name="", url="", methods=("GET",), description=""):
  48. def wrap(f):
  49. api_name = name or f.__name__
  50. api_url = url or "/api/{0}".format(name)
  51. if not hasattr(f, "_urls"):
  52. f._urls = []
  53. f._extra = {}
  54. f._urls.append((api_url, methods))
  55. f._extra[api_name] = (api_url, f.__name__, description)
  56. return f
  57. return wrap
  58. class AbstractViewApi:
  59. appbuilder: "AppBuilder"
  60. base_permissions: Optional[List[str]]
  61. class_permission_name: str
  62. endpoint: str
  63. default_view: str
  64. def create_blueprint(
  65. self,
  66. appbuilder: "AppBuilder",
  67. endpoint: Optional[str] = None,
  68. static_folder: Optional[str] = None,
  69. ):
  70. ...
  71. def get_uninit_inner_views(self):
  72. """
  73. Will return a list with views that need to be initialized.
  74. Normally related_views from ModelView
  75. """
  76. ...
  77. def get_init_inner_views(self):
  78. """
  79. Sets initialized inner views
  80. """
  81. ...
  82. class BaseView(AbstractViewApi):
  83. """
  84. All views inherit from this class.
  85. it's constructor will register your exposed urls on flask as a Blueprint.
  86. This class does not expose any urls, but provides a common base for all views.
  87. Extend this class if you want to expose methods for your own templates
  88. """
  89. appbuilder = None
  90. blueprint = None
  91. endpoint = None
  92. route_base = None
  93. """ Override this if you want to define your own relative url """
  94. template_folder = "templates"
  95. """ The template folder relative location """
  96. static_folder = "static"
  97. """ The static folder relative location """
  98. base_permissions = None
  99. """
  100. List with allowed base permission.
  101. Use it like this if you want to restrict your view to readonly::
  102. class MyView(ModelView):
  103. base_permissions = ['can_list','can_show']
  104. """
  105. class_permission_name = None
  106. """
  107. Override class permission name default fallback to self.__class__.__name__
  108. """
  109. previous_class_permission_name = None
  110. """
  111. If set security cleanup will remove all permissions tuples
  112. with this name
  113. """
  114. method_permission_name = None
  115. """
  116. Override method permission names, example::
  117. method_permissions_name = {
  118. 'get_list': 'read',
  119. 'get': 'read',
  120. 'put': 'write',
  121. 'post': 'write',
  122. 'delete': 'write'
  123. }
  124. """
  125. previous_method_permission_name = None
  126. """
  127. Use same structure as method_permission_name. If set security converge
  128. will replace all method permissions by the new ones
  129. """
  130. exclude_route_methods = set()
  131. """
  132. Does not register routes for a set of builtin ModelView functions.
  133. example::
  134. class ContactModelView(ModelView):
  135. datamodel = SQLAInterface(Contact)
  136. exclude_route_methods = {"delete", "edit"}
  137. """
  138. include_route_methods = None
  139. """
  140. If defined will assume a white list setup, where all endpoints are excluded
  141. except those define on this attribute
  142. example::
  143. class ContactModelView(ModelView):
  144. datamodel = SQLAInterface(Contact)
  145. include_route_methods = {"list"}
  146. The previous example will exclude all endpoints except the `list` endpoint
  147. """
  148. default_view = "list"
  149. """ the default view for this BaseView, to be used with url_for (method name) """
  150. extra_args = None
  151. """ dictionary for injecting extra arguments into template """
  152. limits = None
  153. """
  154. List of limits for this view.
  155. Use it like this if you want to restrict the rate of requests to a view:
  156. class MyView(ModelView):
  157. limits = [Limit("2 per 5 second")]
  158. or use the decorator @limit.
  159. """
  160. _apis = None
  161. def __init__(self):
  162. """
  163. Initialization of base permissions
  164. based on exposed methods and actions
  165. Initialization of extra args
  166. """
  167. # Init class permission override attrs
  168. if not self.previous_class_permission_name and self.class_permission_name:
  169. self.previous_class_permission_name = self.__class__.__name__
  170. self.class_permission_name = (
  171. self.class_permission_name or self.__class__.__name__
  172. )
  173. # Init previous permission override attrs
  174. is_collect_previous = False
  175. if not self.previous_method_permission_name and self.method_permission_name:
  176. self.previous_method_permission_name = dict()
  177. is_collect_previous = True
  178. self.method_permission_name = self.method_permission_name or dict()
  179. # Collect base_permissions and infer previous permissions
  180. is_add_base_permissions = False
  181. if self.base_permissions is None:
  182. self.base_permissions = set()
  183. is_add_base_permissions = True
  184. if self.limits is None:
  185. self.limits = []
  186. for attr_name in dir(self):
  187. # If include_route_methods is not None white list
  188. if (
  189. self.include_route_methods is not None
  190. and attr_name not in self.include_route_methods
  191. ):
  192. continue
  193. # Don't create permission for excluded routes
  194. if attr_name in self.exclude_route_methods:
  195. continue
  196. if hasattr(getattr(self, attr_name), "_permission_name"):
  197. if is_collect_previous:
  198. self.previous_method_permission_name[attr_name] = getattr(
  199. getattr(self, attr_name), "_permission_name"
  200. )
  201. _permission_name = self.get_method_permission(attr_name)
  202. if is_add_base_permissions:
  203. self.base_permissions.add(PERMISSION_PREFIX + _permission_name)
  204. self.base_permissions = list(self.base_permissions)
  205. if not self.extra_args:
  206. self.extra_args = dict()
  207. self._apis = dict()
  208. for attr_name in dir(self):
  209. if hasattr(getattr(self, attr_name), "_extra"):
  210. _extra = getattr(getattr(self, attr_name), "_extra")
  211. for key in _extra:
  212. self._apis[key] = _extra[key]
  213. if hasattr(getattr(self, attr_name), "_limit"):
  214. self.limits.append(getattr(getattr(self, attr_name), "_limit"))
  215. def create_blueprint(self, appbuilder, endpoint=None, static_folder=None):
  216. """
  217. Create Flask blueprint. You will generally not use it
  218. :param appbuilder:
  219. the AppBuilder object
  220. :param endpoint:
  221. endpoint override for this blueprint,
  222. will assume class name if not provided
  223. :param static_folder:
  224. the relative override for static folder,
  225. if omitted application will use the appbuilder static
  226. """
  227. # Store appbuilder instance
  228. self.appbuilder = appbuilder
  229. # If endpoint name is not provided, get it from the class name
  230. self.endpoint = endpoint or self.__class__.__name__
  231. if self.route_base is None:
  232. self.route_base = "/" + self.__class__.__name__.lower()
  233. self.static_folder = static_folder
  234. if not static_folder:
  235. # Create blueprint and register rules
  236. self.blueprint = Blueprint(
  237. self.endpoint,
  238. __name__,
  239. url_prefix=self.route_base,
  240. template_folder=self.template_folder,
  241. )
  242. else:
  243. self.blueprint = Blueprint(
  244. self.endpoint,
  245. __name__,
  246. url_prefix=self.route_base,
  247. template_folder=self.template_folder,
  248. static_folder=static_folder,
  249. )
  250. self._register_urls()
  251. return self.blueprint
  252. def _register_urls(self):
  253. before_request_hooks = get_before_request_hooks(self)
  254. for attr_name in dir(self):
  255. if (
  256. self.include_route_methods is not None
  257. and attr_name not in self.include_route_methods
  258. ):
  259. continue
  260. if attr_name in self.exclude_route_methods:
  261. log.info(
  262. "Not registering route for method %s.%s",
  263. self.__class__.__name__,
  264. attr_name,
  265. )
  266. continue
  267. attr = getattr(self, attr_name)
  268. if hasattr(attr, "_urls"):
  269. for url, methods in attr._urls:
  270. log.info(
  271. "Registering route %s%s %s",
  272. self.blueprint.url_prefix,
  273. url,
  274. methods,
  275. )
  276. route_handler = wrap_route_handler_with_hooks(
  277. attr_name, attr, before_request_hooks
  278. )
  279. self.blueprint.add_url_rule(
  280. url, attr_name, route_handler, methods=methods
  281. )
  282. def render_template(self, template, **kwargs):
  283. """
  284. Use this method on your own endpoints, will pass the extra_args
  285. to the templates.
  286. :param template: The template relative path
  287. :param kwargs: arguments to be passed to the template
  288. """
  289. kwargs["base_template"] = self.appbuilder.base_template
  290. kwargs["appbuilder"] = self.appbuilder
  291. return render_template(
  292. template, **dict(list(kwargs.items()) + list(self.extra_args.items()))
  293. )
  294. def _prettify_name(self, name):
  295. """
  296. Prettify pythonic variable name.
  297. For example, 'HelloWorld' will be converted to 'Hello World'
  298. :param name:
  299. Name to prettify.
  300. """
  301. return re.sub(r"(?<=.)([A-Z])", r" \1", name)
  302. def _prettify_column(self, name):
  303. """
  304. Prettify pythonic variable name.
  305. For example, 'hello_world' will be converted to 'Hello World'
  306. :param name:
  307. Name to prettify.
  308. """
  309. return re.sub("[._]", " ", name).title()
  310. def update_redirect(self):
  311. """
  312. Call it on your own endpoint's to update the back history navigation.
  313. If you bypass it, the next submit or back will go over it.
  314. """
  315. page_history = Stack(session.get("page_history", []))
  316. page_history.push(request.url)
  317. session["page_history"] = page_history.to_json()
  318. def get_redirect(self):
  319. """
  320. Returns the previous url.
  321. """
  322. index_url = self.appbuilder.get_url_for_index
  323. page_history = Stack(session.get("page_history", []))
  324. if page_history.pop() is None:
  325. return index_url
  326. session["page_history"] = page_history.to_json()
  327. url = page_history.pop() or index_url
  328. return url
  329. @classmethod
  330. def get_default_url(cls, **kwargs):
  331. """
  332. Returns the url for this class default endpoint
  333. """
  334. return url_for(cls.__name__ + "." + cls.default_view, **kwargs)
  335. def get_uninit_inner_views(self):
  336. """
  337. Will return a list with views that need to be initialized.
  338. Normally related_views from ModelView
  339. """
  340. return []
  341. def get_init_inner_views(self):
  342. """
  343. Sets initialized inner views
  344. """
  345. def get_method_permission(self, method_name: str) -> str:
  346. """
  347. Returns the permission name for a method
  348. """
  349. permission = self.method_permission_name.get(method_name)
  350. if permission:
  351. return permission
  352. else:
  353. return getattr(getattr(self, method_name), "_permission_name")
  354. class BaseFormView(BaseView):
  355. """
  356. Base class FormView's
  357. """
  358. form_template = "appbuilder/general/model/edit.html"
  359. edit_widget = FormWidget
  360. """ Form widget to override """
  361. form_title = ""
  362. """ The form title to be displayed """
  363. form_columns = None
  364. """ The form columns to include, if empty will include all"""
  365. form = None
  366. """ The WTF form to render """
  367. form_fieldsets = None
  368. """ Form field sets """
  369. default_view = "this_form_get"
  370. """ The form view default entry endpoint """
  371. def _init_vars(self):
  372. self.form_columns = self.form_columns or []
  373. self.form_fieldsets = self.form_fieldsets or []
  374. list_cols = [field.name for field in self.form.refresh()]
  375. if self.form_fieldsets:
  376. self.form_columns = []
  377. for fieldset_item in self.form_fieldsets:
  378. self.form_columns = self.form_columns + list(
  379. fieldset_item[1].get("fields")
  380. )
  381. else:
  382. if not self.form_columns:
  383. self.form_columns = list_cols
  384. def form_get(self, form):
  385. """
  386. Override this method to implement your form processing
  387. """
  388. def form_post(self, form):
  389. """
  390. Override this method to implement your form processing
  391. :param form: WTForm form
  392. Return None or a flask response to render
  393. a custom template or redirect the user
  394. """
  395. def _get_edit_widget(self, form=None, exclude_cols=None, widgets=None):
  396. exclude_cols = exclude_cols or []
  397. widgets = widgets or {}
  398. widgets["edit"] = self.edit_widget(
  399. route_base=self.route_base,
  400. form=form,
  401. include_cols=self.form_columns,
  402. exclude_cols=exclude_cols,
  403. fieldsets=self.form_fieldsets,
  404. )
  405. return widgets
  406. class BaseModelView(BaseView):
  407. """
  408. The base class of ModelView and ChartView, all properties are inherited
  409. Customize ModelView and ChartView overriding this properties
  410. This class supports all the basics for query
  411. """
  412. datamodel = None
  413. """
  414. Your sqla model you must initialize it like::
  415. class MyView(ModelView):
  416. datamodel = SQLAInterface(MyTable)
  417. """
  418. title = "Title"
  419. search_columns = None
  420. """
  421. List with allowed search columns, if not provided
  422. all possible search columns will be used
  423. If you want to limit the search (*filter*) columns possibilities,
  424. define it with a list of column names from your model::
  425. class MyView(ModelView):
  426. datamodel = SQLAInterface(MyTable)
  427. search_columns = ['name','address']
  428. """
  429. search_exclude_columns = None
  430. """
  431. List with columns to exclude from search.
  432. Search includes all possible columns by default
  433. """
  434. search_form_extra_fields = None
  435. """
  436. A dictionary containing column names and a WTForm
  437. Form fields to be added to the search form, these fields do not
  438. exist on the model itself ex::
  439. search_form_extra_fields = {'some_col':BooleanField('Some Col', default=False)}
  440. """
  441. search_form_query_rel_fields = None
  442. """
  443. Add Customized query for related fields on search form.
  444. Assign a dictionary where the keys are the column names of
  445. the related models to filter, the value for each key, is a list of lists with the
  446. same format as base_filter
  447. {'relation col name':[['Related model col',FilterClass,'Filter Value'],...],...}
  448. Add a custom filter to form related fields::
  449. class ContactModelView(ModelView):
  450. datamodel = SQLAModel(Contact, db.session)
  451. search_form_query_rel_fields = {'group':[['name',FilterStartsWith,'W']]}
  452. """
  453. label_columns = None
  454. """
  455. Dictionary of labels for your columns,
  456. override this if you want different pretify labels
  457. example (will just override the label for name column)::
  458. class MyView(ModelView):
  459. datamodel = SQLAInterface(MyTable)
  460. label_columns = {'name':'My Name Label Override'}
  461. """
  462. search_form = None
  463. """ To implement your own add WTF form for Search """
  464. base_filters = None
  465. """
  466. Filter the view use: [['column_name',BaseFilter,'value'],]
  467. example::
  468. def get_user():
  469. return g.user
  470. class MyView(ModelView):
  471. datamodel = SQLAInterface(MyTable)
  472. base_filters = [['created_by', FilterEqualFunction, get_user],
  473. ['name', FilterStartsWith, 'a']]
  474. """
  475. base_order = None
  476. """
  477. Use this property to set default ordering for lists ('col_name','asc|desc')::
  478. class MyView(ModelView):
  479. datamodel = SQLAInterface(MyTable)
  480. base_order = ('my_column_name','asc')
  481. """
  482. search_widget = SearchWidget
  483. """ Search widget you can override with your own """
  484. _base_filters = None
  485. """ Internal base Filter from class Filters will always filter view """
  486. _filters = None
  487. """ Filters object will calculate all possible filter types
  488. based on search_columns """
  489. def __init__(self, **kwargs):
  490. """
  491. Constructor
  492. """
  493. datamodel = kwargs.get("datamodel", None)
  494. if datamodel:
  495. self.datamodel = datamodel
  496. self._init_properties()
  497. self._init_forms()
  498. self._init_titles()
  499. super(BaseModelView, self).__init__(**kwargs)
  500. def _gen_labels_columns(self, list_columns):
  501. """
  502. Auto generates pretty label_columns from list of columns
  503. """
  504. for col in list_columns:
  505. if not self.label_columns.get(col):
  506. self.label_columns[col] = self._prettify_column(col)
  507. def _init_titles(self):
  508. pass
  509. def _init_properties(self):
  510. self.label_columns = self.label_columns or {}
  511. self.base_filters = self.base_filters or []
  512. self.search_exclude_columns = self.search_exclude_columns or []
  513. self.search_columns = self.search_columns or []
  514. self._base_filters = self.datamodel.get_filters().add_filter_list(
  515. self.base_filters
  516. )
  517. list_cols = self.datamodel.get_columns_list()
  518. search_columns = self.datamodel.get_search_columns_list()
  519. if not self.search_columns:
  520. self.search_columns = [
  521. x for x in search_columns if x not in self.search_exclude_columns
  522. ]
  523. self._gen_labels_columns(list_cols)
  524. self._filters = self.datamodel.get_filters(self.search_columns)
  525. def _init_forms(self):
  526. conv = GeneralModelConverter(self.datamodel)
  527. if not self.search_form:
  528. self.search_form = conv.create_form(
  529. self.label_columns,
  530. self.search_columns,
  531. extra_fields=self.search_form_extra_fields,
  532. filter_rel_fields=self.search_form_query_rel_fields,
  533. )
  534. def _get_search_widget(self, form=None, exclude_cols=None, widgets=None):
  535. exclude_cols = exclude_cols or []
  536. widgets = widgets or {}
  537. widgets["search"] = self.search_widget(
  538. route_base=self.route_base,
  539. form=form,
  540. include_cols=self.search_columns,
  541. exclude_cols=exclude_cols,
  542. filters=self._filters,
  543. )
  544. return widgets
  545. def _label_columns_json(self):
  546. """
  547. Prepares dict with labels to be JSON serializable
  548. """
  549. ret = {}
  550. for key, value in list(self.label_columns.items()):
  551. ret[key] = as_unicode(value.encode("UTF-8"))
  552. return ret
  553. class BaseCRUDView(BaseModelView):
  554. """
  555. The base class for ModelView, all properties are inherited
  556. Customize ModelView overriding this properties
  557. """
  558. related_views = None
  559. """
  560. List with ModelView classes
  561. Will be displayed related with this one using relationship sqlalchemy property::
  562. class MyView(ModelView):
  563. datamodel = SQLAModel(Group, db.session)
  564. related_views = [MyOtherRelatedView]
  565. """
  566. _related_views = None
  567. """ internal list with ref to instantiated view classes """
  568. list_title = ""
  569. """ List Title, if not configured the default is 'List ' with pretty model name """
  570. show_title = ""
  571. """ Show Title , if not configured the default is 'Show ' with pretty model name """
  572. add_title = ""
  573. """ Add Title , if not configured the default is 'Add ' with pretty model name """
  574. edit_title = ""
  575. """ Edit Title , if not configured the default is 'Edit ' with pretty model name """
  576. list_columns = None
  577. """
  578. A list of columns (or model's methods) to be displayed on the list view.
  579. Use it to control the order of the display
  580. """
  581. show_columns = None
  582. """
  583. A list of columns (or model's methods) to be displayed on the show view.
  584. Use it to control the order of the display
  585. """
  586. add_columns = None
  587. """
  588. A list of columns (or model's methods) to be displayed on the add form view.
  589. Use it to control the order of the display
  590. """
  591. edit_columns = None
  592. """
  593. A list of columns (or model's methods) to be displayed on the edit form view.
  594. Use it to control the order of the display
  595. """
  596. show_exclude_columns = None
  597. """
  598. A list of columns to exclude from the show view.
  599. By default all columns are included.
  600. """
  601. add_exclude_columns = None
  602. """
  603. A list of columns to exclude from the add form.
  604. By default all columns are included.
  605. """
  606. edit_exclude_columns = None
  607. """
  608. A list of columns to exclude from the edit form.
  609. By default all columns are included.
  610. """
  611. order_columns = None
  612. """ Allowed order columns """
  613. page_size = 25
  614. """
  615. Use this property to change default page size
  616. """
  617. show_fieldsets = None
  618. """
  619. show fieldsets django style [(<'TITLE'|None>, {'fields':[<F1>,<F2>,...]}),....]
  620. ::
  621. class MyView(ModelView):
  622. datamodel = SQLAModel(MyTable, db.session)
  623. show_fieldsets = [
  624. ('Summary', {
  625. 'fields': [
  626. 'name',
  627. 'address',
  628. 'group'
  629. ]
  630. }
  631. ),
  632. ('Personal Info', {
  633. 'fields': [
  634. 'birthday',
  635. 'personal_phone'
  636. ],
  637. 'expanded':False
  638. }
  639. ),
  640. ]
  641. """
  642. add_fieldsets = None
  643. """
  644. add fieldsets django style (look at show_fieldsets for an example)
  645. """
  646. edit_fieldsets = None
  647. """
  648. edit fieldsets django style (look at show_fieldsets for an example)
  649. """
  650. description_columns = None
  651. """
  652. Dictionary with column descriptions that will be shown on the forms::
  653. class MyView(ModelView):
  654. datamodel = SQLAModel(MyTable, db.session)
  655. description_columns = {
  656. 'name': 'your models name column',
  657. 'address': 'the address column'
  658. }
  659. """
  660. validators_columns = None
  661. """ Dictionary to add your own validators for forms """
  662. formatters_columns = None
  663. """ Dictionary of formatter used to format the display of columns
  664. formatters_columns = {'some_date_col': lambda x: x.isoformat() }
  665. """
  666. add_form_extra_fields = None
  667. """
  668. A dictionary containing column names and a WTForm
  669. Form fields to be added to the Add form, these fields do not
  670. exist on the model itself ex::
  671. add_form_extra_fields = {'some_col':BooleanField('Some Col', default=False)}
  672. """
  673. edit_form_extra_fields = None
  674. """ Dictionary to add extra fields to the Edit form using this property """
  675. add_form_query_rel_fields = None
  676. """
  677. Add Customized query for related fields to add form.
  678. Assign a dictionary where the keys are the column names of
  679. the related models to filter, the value for each key, is a list of lists with the
  680. same format as base_filter
  681. {
  682. 'relation col name':
  683. [['Related model col', FilterClass, 'Filter Value'],...],...
  684. }
  685. Add a custom filter to form related fields::
  686. class ContactModelView(ModelView):
  687. datamodel = SQLAModel(Contact, db.session)
  688. add_form_query_rel_fields = {'group': [['name', FilterStartsWith, 'W']]}
  689. """
  690. edit_form_query_rel_fields = None
  691. """
  692. Add Customized query for related fields to edit form.
  693. Assign a dictionary where the keys are the column names of
  694. the related models to filter, the value for each key, is a list of lists with the
  695. same format as base_filter
  696. {
  697. 'relation col name':
  698. [['Related model col', FilterClass, 'Filter Value'],...],...
  699. }
  700. Add a custom filter to form related fields::
  701. class ContactModelView(ModelView):
  702. datamodel = SQLAModel(Contact, db.session)
  703. edit_form_query_rel_fields = {'group':[['name',FilterStartsWith,'W']]}
  704. """
  705. add_form = None
  706. """ To implement your own, assign WTF form for Add """
  707. edit_form = None
  708. """ To implement your own, assign WTF form for Edit """
  709. list_template = "appbuilder/general/model/list.html"
  710. """ Your own add jinja2 template for list """
  711. edit_template = "appbuilder/general/model/edit.html"
  712. """ Your own add jinja2 template for edit """
  713. add_template = "appbuilder/general/model/add.html"
  714. """ Your own add jinja2 template for add """
  715. show_template = "appbuilder/general/model/show.html"
  716. """ Your own add jinja2 template for show """
  717. list_widget = ListWidget
  718. """ List widget override """
  719. edit_widget = FormWidget
  720. """ Edit widget override """
  721. add_widget = FormWidget
  722. """ Add widget override """
  723. show_widget = ShowWidget
  724. """ Show widget override """
  725. actions = None
  726. def __init__(self, **kwargs):
  727. super(BaseCRUDView, self).__init__(**kwargs)
  728. # collect and setup actions
  729. self.actions = {}
  730. for attr_name in dir(self):
  731. func = getattr(self, attr_name)
  732. if hasattr(func, "_action"):
  733. action = ActionItem(*func._action, func=func)
  734. permission_name = action.name
  735. # Infer previous if not declared
  736. if self.method_permission_name.get(attr_name):
  737. if not self.previous_method_permission_name.get(attr_name):
  738. self.previous_method_permission_name[attr_name] = action.name
  739. permission_name = (
  740. PERMISSION_PREFIX + self.method_permission_name.get(attr_name)
  741. )
  742. if permission_name not in self.base_permissions:
  743. self.base_permissions.append(permission_name)
  744. self.actions[action.name] = action
  745. def _init_forms(self):
  746. """
  747. Init forms for Add and Edit
  748. """
  749. super(BaseCRUDView, self)._init_forms()
  750. conv = GeneralModelConverter(self.datamodel)
  751. if not self.add_form:
  752. self.add_form = conv.create_form(
  753. self.label_columns,
  754. self.add_columns,
  755. self.description_columns,
  756. self.validators_columns,
  757. self.add_form_extra_fields,
  758. self.add_form_query_rel_fields,
  759. )
  760. if not self.edit_form:
  761. self.edit_form = conv.create_form(
  762. self.label_columns,
  763. self.edit_columns,
  764. self.description_columns,
  765. self.validators_columns,
  766. self.edit_form_extra_fields,
  767. self.edit_form_query_rel_fields,
  768. )
  769. def _init_titles(self):
  770. """
  771. Init Titles if not defined
  772. """
  773. super(BaseCRUDView, self)._init_titles()
  774. class_name = self.datamodel.model_name
  775. if not self.list_title:
  776. self.list_title = "List " + self._prettify_name(class_name)
  777. if not self.add_title:
  778. self.add_title = "Add " + self._prettify_name(class_name)
  779. if not self.edit_title:
  780. self.edit_title = "Edit " + self._prettify_name(class_name)
  781. if not self.show_title:
  782. self.show_title = "Show " + self._prettify_name(class_name)
  783. self.title = self.list_title
  784. def _init_properties(self):
  785. """
  786. Init Properties
  787. """
  788. super(BaseCRUDView, self)._init_properties()
  789. # Reset init props
  790. self.related_views = self.related_views or []
  791. self._related_views = self._related_views or []
  792. self.description_columns = self.description_columns or {}
  793. self.validators_columns = self.validators_columns or {}
  794. self.formatters_columns = self.formatters_columns or {}
  795. self.add_form_extra_fields = self.add_form_extra_fields or {}
  796. self.edit_form_extra_fields = self.edit_form_extra_fields or {}
  797. self.show_exclude_columns = self.show_exclude_columns or []
  798. self.add_exclude_columns = self.add_exclude_columns or []
  799. self.edit_exclude_columns = self.edit_exclude_columns or []
  800. # Generate base props
  801. list_cols = self.datamodel.get_user_columns_list()
  802. self.list_columns = self.list_columns or [list_cols[0]]
  803. self._gen_labels_columns(self.list_columns)
  804. self.order_columns = (
  805. self.order_columns
  806. or self.datamodel.get_order_columns_list(list_columns=self.list_columns)
  807. )
  808. if self.show_fieldsets:
  809. self.show_columns = []
  810. for fieldset_item in self.show_fieldsets:
  811. self.show_columns = self.show_columns + list(
  812. fieldset_item[1].get("fields")
  813. )
  814. else:
  815. if not self.show_columns:
  816. self.show_columns = [
  817. x for x in list_cols if x not in self.show_exclude_columns
  818. ]
  819. if self.add_fieldsets:
  820. self.add_columns = []
  821. for fieldset_item in self.add_fieldsets:
  822. self.add_columns = self.add_columns + list(
  823. fieldset_item[1].get("fields")
  824. )
  825. else:
  826. if not self.add_columns:
  827. self.add_columns = [
  828. x for x in list_cols if x not in self.add_exclude_columns
  829. ]
  830. if self.edit_fieldsets:
  831. self.edit_columns = []
  832. for fieldset_item in self.edit_fieldsets:
  833. self.edit_columns = self.edit_columns + list(
  834. fieldset_item[1].get("fields")
  835. )
  836. else:
  837. if not self.edit_columns:
  838. self.edit_columns = [
  839. x for x in list_cols if x not in self.edit_exclude_columns
  840. ]
  841. """
  842. -----------------------------------------------------
  843. GET WIDGETS SECTION
  844. -----------------------------------------------------
  845. """
  846. def _get_related_view_widget(
  847. self,
  848. item,
  849. related_view,
  850. order_column="",
  851. order_direction="",
  852. page=None,
  853. page_size=None,
  854. ):
  855. fk = related_view.datamodel.get_related_fk(self.datamodel.obj)
  856. filters = related_view.datamodel.get_filters()
  857. # Check if it's a many to one model relation
  858. if related_view.datamodel.is_relation_many_to_one(fk):
  859. filters.add_filter_related_view(
  860. fk,
  861. self.datamodel.FilterRelationOneToManyEqual,
  862. self.datamodel.get_pk_value(item),
  863. )
  864. # Check if it's a many to many model relation
  865. elif related_view.datamodel.is_relation_many_to_many(fk):
  866. filters.add_filter_related_view(
  867. fk,
  868. self.datamodel.FilterRelationManyToManyEqual,
  869. self.datamodel.get_pk_value(item),
  870. )
  871. else:
  872. if isclass(related_view) and issubclass(related_view, BaseView):
  873. name = related_view.__name__
  874. else:
  875. name = related_view.__class__.__name__
  876. log.error("Can't find relation on related view %s", name)
  877. return None
  878. return related_view._get_view_widget(
  879. filters=filters,
  880. order_column=order_column,
  881. order_direction=order_direction,
  882. page=page,
  883. page_size=page_size,
  884. )
  885. def _get_related_views_widgets(
  886. self, item, orders=None, pages=None, page_sizes=None, widgets=None, **args
  887. ):
  888. """
  889. :return:
  890. Returns a dict with 'related_views' key with a list of
  891. Model View widgets
  892. """
  893. widgets = widgets or {}
  894. widgets["related_views"] = []
  895. for view in self._related_views:
  896. if orders.get(view.__class__.__name__):
  897. order_column, order_direction = orders.get(view.__class__.__name__)
  898. else:
  899. order_column, order_direction = "", ""
  900. widgets["related_views"].append(
  901. self._get_related_view_widget(
  902. item,
  903. view,
  904. order_column,
  905. order_direction,
  906. page=pages.get(view.__class__.__name__),
  907. page_size=page_sizes.get(view.__class__.__name__),
  908. )
  909. )
  910. return widgets
  911. def _get_view_widget(self, **kwargs):
  912. """
  913. :return:
  914. Returns a Model View widget
  915. """
  916. return self._get_list_widget(**kwargs).get("list")
  917. def _get_list_widget(
  918. self,
  919. filters,
  920. actions=None,
  921. order_column="",
  922. order_direction="",
  923. page=None,
  924. page_size=None,
  925. widgets=None,
  926. **kwargs,
  927. ):
  928. """get joined base filter and current active filter for query"""
  929. widgets = widgets or {}
  930. actions = actions or self.actions
  931. page_size = page_size or self.page_size
  932. if not order_column and self.base_order:
  933. order_column, order_direction = self.base_order
  934. joined_filters = filters.get_joined_filters(self._base_filters)
  935. count, lst = self.datamodel.query(
  936. joined_filters,
  937. order_column,
  938. order_direction,
  939. page=page,
  940. page_size=page_size,
  941. )
  942. pks = self.datamodel.get_keys(lst)
  943. # serialize composite pks
  944. pks = [self._serialize_pk_if_composite(pk) for pk in pks]
  945. widgets["list"] = self.list_widget(
  946. label_columns=self.label_columns,
  947. include_columns=self.list_columns,
  948. value_columns=self.datamodel.get_values(lst, self.list_columns),
  949. order_columns=self.order_columns,
  950. formatters_columns=self.formatters_columns,
  951. page=page,
  952. page_size=page_size,
  953. count=count,
  954. pks=pks,
  955. actions=actions,
  956. filters=filters,
  957. modelview_name=self.__class__.__name__,
  958. **kwargs,
  959. )
  960. return widgets
  961. def _get_show_widget(
  962. self, pk, item, widgets=None, actions=None, show_fieldsets=None
  963. ):
  964. widgets = widgets or {}
  965. actions = actions or self.actions
  966. show_fieldsets = show_fieldsets or self.show_fieldsets
  967. widgets["show"] = self.show_widget(
  968. pk=pk,
  969. label_columns=self.label_columns,
  970. include_columns=self.show_columns,
  971. value_columns=self.datamodel.get_values_item(item, self.show_columns),
  972. formatters_columns=self.formatters_columns,
  973. actions=actions,
  974. fieldsets=show_fieldsets,
  975. modelview_name=self.__class__.__name__,
  976. )
  977. return widgets
  978. def _get_add_widget(self, form, exclude_cols=None, widgets=None):
  979. exclude_cols = exclude_cols or []
  980. widgets = widgets or {}
  981. widgets["add"] = self.add_widget(
  982. form=form,
  983. include_cols=self.add_columns,
  984. exclude_cols=exclude_cols,
  985. fieldsets=self.add_fieldsets,
  986. )
  987. return widgets
  988. def _get_edit_widget(self, form, exclude_cols=None, widgets=None):
  989. exclude_cols = exclude_cols or []
  990. widgets = widgets or {}
  991. widgets["edit"] = self.edit_widget(
  992. form=form,
  993. include_cols=self.edit_columns,
  994. exclude_cols=exclude_cols,
  995. fieldsets=self.edit_fieldsets,
  996. )
  997. return widgets
  998. def get_uninit_inner_views(self):
  999. """
  1000. Will return a list with views that need to be initialized.
  1001. Normally related_views from ModelView
  1002. """
  1003. return self.related_views
  1004. def get_init_inner_views(self):
  1005. """
  1006. Get the list of related ModelViews after they have been initialized
  1007. """
  1008. return self._related_views
  1009. """
  1010. -----------------------------------------------------
  1011. CRUD functions behaviour
  1012. -----------------------------------------------------
  1013. """
  1014. def _list(self, **kwargs):
  1015. """
  1016. list function logic, override to implement different logic
  1017. returns list and search widget
  1018. """
  1019. if get_order_args().get(self.__class__.__name__):
  1020. order_column, order_direction = get_order_args().get(
  1021. self.__class__.__name__
  1022. )
  1023. else:
  1024. order_column, order_direction = "", ""
  1025. page = get_page_args().get(self.__class__.__name__)
  1026. page_size = get_page_size_args().get(self.__class__.__name__)
  1027. get_filter_args(self._filters)
  1028. widgets = self._get_list_widget(
  1029. filters=self._filters,
  1030. order_column=order_column,
  1031. order_direction=order_direction,
  1032. page=page,
  1033. page_size=page_size,
  1034. **kwargs,
  1035. )
  1036. form = self.search_form.refresh()
  1037. self.update_redirect()
  1038. return self._get_search_widget(form=form, widgets=widgets)
  1039. def _show(self, pk):
  1040. """
  1041. show function logic, override to implement different logic
  1042. returns show and related list widget
  1043. """
  1044. pages = get_page_args()
  1045. page_sizes = get_page_size_args()
  1046. orders = get_order_args()
  1047. item = self.datamodel.get(pk, self._base_filters)
  1048. if not item:
  1049. abort(404)
  1050. widgets = self._get_show_widget(pk, item)
  1051. self.update_redirect()
  1052. return self._get_related_views_widgets(
  1053. item, orders=orders, pages=pages, page_sizes=page_sizes, widgets=widgets
  1054. )
  1055. def _add(self):
  1056. """
  1057. Add function logic, override to implement different logic
  1058. returns add widget or None
  1059. """
  1060. is_valid_form = True
  1061. get_filter_args(self._filters, disallow_if_not_in_search=False)
  1062. exclude_cols = self._filters.get_relation_cols()
  1063. form = self.add_form.refresh()
  1064. if request.method == "POST":
  1065. self._fill_form_exclude_cols(exclude_cols, form)
  1066. if form.validate():
  1067. self.process_form(form, True)
  1068. item = self.datamodel.obj()
  1069. try:
  1070. form.populate_obj(item)
  1071. self.pre_add(item)
  1072. except Exception as e:
  1073. flash(str(e), "danger")
  1074. else:
  1075. if self.datamodel.add(item):
  1076. self.post_add(item)
  1077. flash(*self.datamodel.message)
  1078. finally:
  1079. return None
  1080. else:
  1081. is_valid_form = False
  1082. if is_valid_form:
  1083. self.update_redirect()
  1084. return self._get_add_widget(form=form, exclude_cols=exclude_cols)
  1085. def _edit(self, pk):
  1086. """
  1087. Edit function logic, override to implement different logic
  1088. returns Edit widget and related list or None
  1089. """
  1090. is_valid_form = True
  1091. pages = get_page_args()
  1092. page_sizes = get_page_size_args()
  1093. orders = get_order_args()
  1094. get_filter_args(self._filters, disallow_if_not_in_search=False)
  1095. exclude_cols = self._filters.get_relation_cols()
  1096. item = self.datamodel.get(pk, self._base_filters)
  1097. if not item:
  1098. abort(404)
  1099. # convert pk to correct type, if pk is non string type.
  1100. pk = self.datamodel.get_pk_value(item)
  1101. if request.method == "POST":
  1102. form = self.edit_form.refresh(request.form)
  1103. # fill the form with the suppressed cols, generated from exclude_cols
  1104. self._fill_form_exclude_cols(exclude_cols, form)
  1105. # trick to pass unique validation
  1106. form._id = pk
  1107. if form.validate():
  1108. self.process_form(form, False)
  1109. try:
  1110. form.populate_obj(item)
  1111. self.pre_update(item)
  1112. except Exception as e:
  1113. flash(str(e), "danger")
  1114. else:
  1115. if self.datamodel.edit(item):
  1116. self.post_update(item)
  1117. flash(*self.datamodel.message)
  1118. finally:
  1119. return None
  1120. else:
  1121. is_valid_form = False
  1122. else:
  1123. # Only force form refresh for select cascade events
  1124. form = self.edit_form.refresh(obj=item)
  1125. # Perform additional actions to pre-fill the edit form.
  1126. self.prefill_form(form, pk)
  1127. widgets = self._get_edit_widget(form=form, exclude_cols=exclude_cols)
  1128. widgets = self._get_related_views_widgets(
  1129. item,
  1130. filters={},
  1131. orders=orders,
  1132. pages=pages,
  1133. page_sizes=page_sizes,
  1134. widgets=widgets,
  1135. )
  1136. if is_valid_form:
  1137. self.update_redirect()
  1138. return widgets
  1139. def _delete(self, pk):
  1140. """
  1141. Delete function logic, override to implement different logic
  1142. deletes the record with primary_key = pk
  1143. :param pk:
  1144. record primary key to delete
  1145. """
  1146. item = self.datamodel.get(pk, self._base_filters)
  1147. if not item:
  1148. abort(404)
  1149. try:
  1150. self.pre_delete(item)
  1151. except Exception as e:
  1152. flash(str(e), "danger")
  1153. else:
  1154. if self.datamodel.delete(item):
  1155. self.post_delete(item)
  1156. flash(*self.datamodel.message)
  1157. self.update_redirect()
  1158. """
  1159. ------------------------------------------------
  1160. HELPER FUNCTIONS
  1161. ------------------------------------------------
  1162. """
  1163. def _serialize_pk_if_composite(self, pk):
  1164. def date_serializer(obj):
  1165. if isinstance(obj, datetime):
  1166. return {"_type": "datetime", "value": obj.isoformat()}
  1167. elif isinstance(obj, date):
  1168. return {"_type": "date", "value": obj.isoformat()}
  1169. if self.datamodel.is_pk_composite():
  1170. try:
  1171. pk = json.dumps(pk, default=date_serializer)
  1172. except Exception:
  1173. pass
  1174. return pk
  1175. def _deserialize_pk_if_composite(self, pk):
  1176. def date_deserializer(obj):
  1177. if "_type" not in obj:
  1178. return obj
  1179. from dateutil import parser
  1180. if obj["_type"] == "datetime":
  1181. return parser.parse(obj["value"])
  1182. elif obj["_type"] == "date":
  1183. return parser.parse(obj["value"]).date()
  1184. return obj
  1185. if self.datamodel.is_pk_composite():
  1186. try:
  1187. pk = json.loads(pk, object_hook=date_deserializer)
  1188. except Exception:
  1189. pass
  1190. return pk
  1191. def _fill_form_exclude_cols(self, exclude_cols, form):
  1192. """
  1193. fill the form with the suppressed cols, generated from exclude_cols
  1194. """
  1195. for filter_key in exclude_cols:
  1196. filter_value = self._filters.get_filter_value(filter_key)
  1197. rel_obj = self.datamodel.get_related_obj(filter_key, filter_value)
  1198. if hasattr(form, filter_key):
  1199. field = getattr(form, filter_key)
  1200. field.data = rel_obj
  1201. def is_get_mutation_allowed(self) -> bool:
  1202. """
  1203. Check is mutations on HTTP GET methods are allowed.
  1204. Always called on a request
  1205. """
  1206. if current_app.config.get("FAB_ALLOW_GET_UNSAFE_MUTATIONS", False):
  1207. return True
  1208. return not (
  1209. request.method == "GET" and self.appbuilder.app.extensions.get("csrf")
  1210. )
  1211. def prefill_form(self, form, pk):
  1212. """
  1213. Override this, will be called only if the current action is rendering
  1214. an edit form (a GET request), and is used to perform additional action to
  1215. prefill the form.
  1216. This is useful when you have added custom fields that depend on the
  1217. database contents. Fields that were added by name of a normal column
  1218. or relationship should work out of the box.
  1219. example::
  1220. def prefill_form(self, form, pk):
  1221. if form.email.data:
  1222. form.email_confirmation.data = form.email.data
  1223. """
  1224. def process_form(self, form, is_created):
  1225. """
  1226. Override this, will be called only if the current action is submitting
  1227. a create/edit form (a POST request), and is used to perform additional
  1228. action before the form is used to populate the item.
  1229. By default does nothing.
  1230. example::
  1231. def process_form(self, form, is_created):
  1232. if not form.owner:
  1233. form.owner.data = 'n/a'
  1234. """
  1235. def pre_update(self, item):
  1236. """
  1237. Override this, this method is called before the update takes place.
  1238. If an exception is raised by this method,
  1239. the message is shown to the user and the update operation is
  1240. aborted. Because of this behavior, it can be used as a way to
  1241. implement more complex logic around updates. For instance
  1242. allowing only the original creator of the object to update it.
  1243. """
  1244. def post_update(self, item):
  1245. """
  1246. Override this, will be called after update
  1247. """
  1248. def pre_add(self, item):
  1249. """
  1250. Override this, will be called before add.
  1251. If an exception is raised by this method,
  1252. the message is shown to the user and the add operation is aborted.
  1253. """
  1254. def post_add(self, item):
  1255. """
  1256. Override this, will be called after update
  1257. """
  1258. def pre_delete(self, item):
  1259. """
  1260. Override this, will be called before delete
  1261. If an exception is raised by this method,
  1262. the message is shown to the user and the delete operation is
  1263. aborted. Because of this behavior, it can be used as a way to
  1264. implement more complex logic around deletes. For instance
  1265. allowing only the original creator of the object to delete it.
  1266. """
  1267. def post_delete(self, item):
  1268. """
  1269. Override this, will be called after delete
  1270. """