dashboard: add vm ownership-transfer

circle/dashboard/templates/dashboard/vm-detail-tx-owner.html

+{% extends "dashboard/base.html" %}
+{% load i18n %}
+
+{% block content %}
+  <div class="body-content">
+    <div class="panel panel-default">
+      <div class="panel-heading">
+        <h3 class="no-margin">
+            Transfer ownership
+        </h3>
+      </div>
+      <div class="panel-body">
+        <div class="pull-right">
+          <form action="" method="POST">
+            {% csrf_token %}
+            <input name="name">
+            <input type="submit">
+          </form>
+        </div>
+      </div>
+  </div>
+{% endblock %}

circle/dashboard/urls.py

@@ -4,7 +4,7 @@ from vm.models import Instance
 from .views import (
     IndexView, VmDetailView, VmList, VmCreate, TemplateDetail, AclUpdateView,
     VmDelete, VmMassDelete, vm_activity, NodeList, NodeDetailView,
-    TransferOwnershipConfirmView
+    TransferOwnershipView, TransferOwnershipConfirmView
 )
 
 urlpatterns = patterns(
@@ -16,6 +16,8 @@ urlpatterns = patterns(
         name='dashboard.views.detail'),
     url(r'^vm/(?P<pk>\d+)/acl/$', AclUpdateView.as_view(model=Instance),
         name='dashboard.views.vm-acl'),
+    url(r'^vm/(?P<pk>\d+)/tx/$', TransferOwnershipView.as_view(),
+        name='dashboard.views.vm-transfer-ownership'),
     url(r'^vm/list/$', VmList.as_view(), name='dashboard.views.vm-list'),
     url(r'^vm/create/$', VmCreate.as_view(),
         name='dashboard.views.vm-create'),

circle/dashboard/views.py

@@ -499,6 +499,30 @@ def vm_activity(request, pk):
     )
 
 
+class TransferOwnershipView(LoginRequiredMixin, DetailView):
+    model = Instance
+    template_name = 'dashboard/vm-detail-tx-owner.html'
+
+    def post(self, request, *args, **kwargs):
+        try:
+            new_owner = User.objects.get(username=request.POST['name'])
+        except User.DoesNotExist:
+            raise Http404()
+        except KeyError:
+            raise SuspiciousOperation()
+
+        obj = self.get_object()
+        if not (obj.owner == request.user or
+                request.user.is_superuser):
+            raise PermissionDenied()
+
+        token = signing.dumps((obj.pk, new_owner.pk),
+                              salt=TransferOwnershipConfirmView.get_salt())
+        return HttpResponse("%s?key=%s" % (
+            reverse('dashboard.views.vm-transfer-ownership-confirm'), token),
+            content_type="text/plain")
+
+
 class TransferOwnershipConfirmView(LoginRequiredMixin, View):
     max_age = 3 * 24 * 3600
     success_message = _("Ownership successfully transferred.")