dashboard: acl delete access

circle/dashboard/static/dashboard/dashboard.css

@@ -499,3 +499,8 @@ footer a, footer a:hover, footer a:visited {
 .table-sorting {
   display: none;
 }
+
+#vm-access-table th:last-child, #vm-access-table td:last-child,
+#template-access-table th:last-child, #template-access-table td:last-child {
+  text-align: center;
+}

circle/dashboard/templates/dashboard/template-edit.html

@@ -8,7 +8,7 @@
 {% block content %}
 
 <div class="row">
-  <div class="col-md-8">
+  <div class="col-md-7">
     <div class="panel panel-default">
       <div class="panel-heading">
         <a class="pull-right btn btn-default btn-xs" href="{% url "dashboard.views.template-list" %}">{% trans "Back" %}</a>
@@ -23,33 +23,51 @@
     </div>
   </div>
 
-  <div class="col-md-4">
+  <div class="col-md-5">
     <div class="panel panel-default">
       <div class="panel-heading">
         <h4 class="no-margin"><i class="icon-group"></i> {% trans "Manage access"  %}</h4>
       </div>
       <div class="panel-body">
         <form action="{% url "dashboard.views.template-acl" pk=object.pk %}" method="post">{% csrf_token %}
-          <table class="table table-striped table-with-form-fields">
-            <thead><tr><th></th><th>{% trans "Who" %}</th><th>{% trans "What" %}</th><th></th></tr></thead>
+          <table class="table table-striped table-with-form-fields" id="template-access-table">
+            <thead>
+              <tr>
+                <th></th>
+                <th>{% trans "Who" %}</th>
+                <th>{% trans "What" %}</th>
+                <th><i class="icon-remove"></i></th>
+            </tr></thead>
             <tbody>
                 {% for i in acl.users %}
-                <tr><td><i class="icon-user"></i></td><td>{{i.user}}</td>
-                    <td><select class="form-control" name="perm-u-{{i.user.id}}">
+                <tr>
+                  <td><i class="icon-user"></i></td><td>{{i.user}}</td>
+                  <td>
+                    <select class="form-control" name="perm-u-{{i.user.id}}">
                       {% for id, name in acl.levels %}
                       <option{%if id = i.level%} selected="selected"{%endif%} value="{{id}}">{{name}}</option>
                       {% endfor %}
-                    </select></td>
-                    <td><a href="#" class="btn btn-link btn-xs"><i class="icon-remove"><span class="sr-only">{% trans "remove" %}</span></i></a></td></tr>
+                    </select>
+                  </td>
+                  <td>
+                    <input type="checkbox" name="remove-u-{{i.user.id}}" title="{% trans "Remove" %}"/>
+                  </td>
+                </tr>
                 {% endfor %}
                 {% for i in acl.groups %}
-                <tr><td><i class="icon-group"></i></td><td>{{i.group}}</td>
-                    <td><select class="form-control" name="perm-g-{{i.group.id}}">
+                <tr>
+                  <td><i class="icon-group"></i></td><td>{{i.group}}</td>
+                  <td>
+                    <select class="form-control" name="perm-g-{{i.group.id}}">
                       {% for id, name in acl.levels %}
                       <option{%if id = i.level%} selected="selected"{%endif%} value="{{id}}">{{name}}</option>
                       {% endfor %}
-                    </select></td>
-                    <td><a href="#" class="btn btn-link btn-xs"><i class="icon-remove"><span class="sr-only">{% trans "remove" %}</span></i></a></td></tr>
+                    </select>
+                  </td>
+                  <td>
+                    <input type="checkbox" name="remove-g-{{i.group.id}}" title="{% trans "Remove" %}"/>
+                  </td>
+                </tr>
                 {% endfor %}
                 <tr><td><i class="icon-plus"></i></td>
                     <td><input type="text" class="form-control" name="perm-new-name"

circle/dashboard/templates/dashboard/vm-detail/access.html

@@ -15,26 +15,43 @@
 </p>
 <h3>{% trans "Permissions"|capfirst %}</h3>
   <form action="{{acl.url}}" method="post">{% csrf_token %}
-  <table class="table table-striped table-with-form-fields">
-    <thead><tr><th></th><th>{% trans "Who" %}</th><th>{% trans "What" %}</th><th></th></tr></thead>
+  <table class="table table-striped table-with-form-fields" id="vm-access-table">
+    <thead><tr>
+        <th></th>
+        <th>{% trans "Who" %}</th>
+        <th>{% trans "What" %}</th>
+        <th>{% trans "Remove" %}</th>
+    </tr></thead>
     <tbody>
         {% for i in acl.users %}
-        <tr><td><i class="icon-user"></i></td><td>{{i.user}}</td>
-            <td><select class="form-control" name="perm-u-{{i.user.id}}">
+        <tr>
+          <td><i class="icon-user"></i></td>
+          <td>{{i.user}}</td>
+          <td>
+            <select class="form-control" name="perm-u-{{i.user.id}}">
               {% for id, name in acl.levels %}
                 <option{%if id = i.level%} selected="selected"{%endif%} value="{{id}}">{{name}}</option>
               {% endfor %}
-            </select></td>
-            <td><a href="#" class="btn btn-link btn-xs"><i class="icon-remove"><span class="sr-only">{% trans "remove" %}</span></i></a></td></tr>
+            </select>
+          </td>
+          <td>
+            <input type="checkbox" name="remove-u-{{i.user.id}}"/>
+          </td>
+        </tr>
         {% endfor %}
         {% for i in acl.groups %}
-        <tr><td><i class="icon-group"></i></td><td>{{i.group}}</td>
-            <td><select class="form-control" name="perm-g-{{i.group.id}}">
+        <tr>
+          <td><i class="icon-group"></i></td><td>{{i.group}}</td>
+          <td>
+            <select class="form-control" name="perm-g-{{i.group.id}}">
               {% for id, name in acl.levels %}
               <option{%if id = i.level%} selected="selected"{%endif%} value="{{id}}">{{name}}</option>
               {% endfor %}
             </select></td>
-            <td><a href="#" class="btn btn-link btn-xs"><i class="icon-remove"><span class="sr-only">{% trans "remove" %}</span></i></a></td></tr>
+          <td>
+            <input type="checkbox" name="remove-g-{{i.group.id}}"/>
+          </td>
+        </tr>
         {% endfor %}
         <tr><td><i class="icon-plus"></i></td>
             <td><input type="text" class="form-control" name="perm-new-name"

circle/dashboard/views.py

@@ -714,8 +714,9 @@ class AclUpdateView(LoginRequiredMixin, View, SingleObjectMixin):
                            unicode(instance), unicode(request.user))
             raise PermissionDenied()
         self.set_levels(request, instance)
+        self.remove_levels(request, instance)
         self.add_levels(request, instance)
-        return redirect(instance)
+        return redirect("%s#access" % instance.get_absolute_url())
 
     def set_levels(self, request, instance):
         for key, value in request.POST.items():
@@ -732,6 +733,24 @@ class AclUpdateView(LoginRequiredMixin, View, SingleObjectMixin):
                             unicode(entity), unicode(instance),
                             value, unicode(request.user))
 
+    def remove_levels(self, request, instance):
+        for key, value in request.POST.items():
+            if key.startswith("remove"):
+                typ = key[7:8]  # len("remove-")
+                id = key[9:]  # len("remove-x-")
+                entity = {'u': User, 'g': Group}[typ].objects.get(id=id)
+                if getattr(instance, "owner", None) == entity:
+                    logger.info("Tried to remove owner from %s by %s.",
+                                unicode(instance), unicode(request.user))
+                    msg = _("The original owner cannot be removed, however "
+                            "you can transfer ownership!")
+                    messages.warning(request, msg)
+                    continue
+                instance.set_level(entity, None)
+                logger.info("Revoked %s's access to %s by %s.",
+                            unicode(entity), unicode(instance),
+                            unicode(request.user))
+
     def add_levels(self, request, instance):
         name = request.POST['perm-new-name']
         value = request.POST['perm-new']
@@ -772,6 +791,7 @@ class TemplateAclUpdateView(AclUpdateView):
         else:
             self.set_levels(request, template)
             self.add_levels(request, template)
+            self.remove_levels(request, template)
 
             post_for_disk = request.POST.copy()
             post_for_disk['perm-new'] = 'user'
@@ -779,8 +799,7 @@ class TemplateAclUpdateView(AclUpdateView):
             for d in template.disks.all():
                 self.add_levels(request, d)
 
-        return redirect(reverse("dashboard.views.template-detail",
-                                kwargs=self.kwargs))
+        return redirect(template)
 
 
 class GroupAclUpdateView(AclUpdateView):