Allow preventing user editing

Kwpolska · Kwpolska · commit ed0e54c70eab · 2015-08-08T10:34:48.000+02:00
On per-UID basis in conf.py, for demo environments only!

Signed-off-by: Chris Warrick &lt;kwpolska@gmail.com&gt;
diff --git a/coil/web.py b/coil/web.py
@@ -123,6 +123,7 @@ def configure_site():
     app.config['COIL_LOGIN_CAPTCHA'] = _site.config.get(
         'COIL_LOGIN_CAPTCHA',
         {'enabled': False, 'site_key': '', 'secret_key': ''})
+    app.config['COIL_USERS_PREVENT_EDITING'] = _site.config.get('COIL_USERS_PREVENT_EDITING', [])
     app.config['COIL_LIMITED'] = _site.config.get('COIL_LIMITED', False)
     app.config['REDIS_URL'] = _site.config.get('COIL_REDIS_URL',
                                                'redis://localhost:6379/0')
@@ -955,6 +956,8 @@ def acp_account():
     action = 'edit'
     form = AccountForm()
     if request.method == 'POST':
+        if int(current_user.uid) in app.config['COIL_USERS_PREVENT_EDITING']:
+            return error("Cannot edit data for this user.", 403)
         if not form.validate():
             return error("Bad Request", 400)
         action = 'save'
diff --git a/docs/admin/setup.rst b/docs/admin/setup.rst
@@ -53,10 +53,6 @@ Then, you must make some changes to the config:
    **Store it in a safe place** — git is not one!  You can use
    ``os.urandom(24)`` to generate something good.
  * ``COIL_URL`` — the URL under which Coil can be accessed.
- * ``COIL_LOGIN_CAPTCHA`` — if you want reCAPTCHA to appear on the login page
-   (aimed at plugic environments, eg. the demo site), set this to a dict of
-   ``{'enabled': True, 'site_key': '', 'secret_key': ''}`` and fill in your data.
-   If you don’t want a CAPTCHA, don’t set this setting.
  * ``_MAKO_DISABLE_CACHING = True``
  * Modify ``POSTS`` and ``PAGES``, replacing ``.txt`` with ``.html``.
  * You must set the mode (Limited vs Full) and configure it accordingly — see
@@ -70,6 +66,18 @@ is by downloading the raw ``.css`` file and saving it as ``files/assets/css/cust
 
 __ https://github.com/Voog/wysihtml/blob/master/examples/css/stylesheet.css
 
+Special config for demo sites
+-----------------------------
+
+The `demo site <https://coildemo-admin.getnikola.com/>`_ uses the following two
+settings, which might also be useful for some environments:
+
+* ``COIL_LOGIN_CAPTCHA`` — if you want reCAPTCHA to appear on the login page
+   (aimed at plugic environments, eg. the demo site), set this to a dict of
+   ``{'enabled': True, 'site_key': '', 'secret_key': ''}`` and fill in your data.
+   If you don’t want a CAPTCHA, don’t set this setting.
+* ``COIL_USERS_PREVENT_EDITING`` — list of user IDs (integers) that cannot edit their
+  profiles.
 
 Limited Mode vs. Full Mode
 ==========================
diff --git a/setup.py b/setup.py
@@ -7,7 +7,7 @@
     dependencies = [l.strip() for l in fh]
 
 setup(name='coil',
-      version='1.3.4-alpha.1',
+      version='1.3.4-alpha.2',
       description='A user-friendly CMS frontend for Nikola.',
       keywords='coil,nikola,cms',
       author='Chris Warrick, Roberto Alsina, Henry Hirsch et al.',
