hostile-takeover/stats/adjustplayer.py

import os
import config
import basehandler
import models
import accounts

from google.appengine.api import users
from google.appengine.ext import webapp
from google.appengine.ext.webapp import template
from google.appengine.ext import db

class BlockPlayer(basehandler.BaseHandler):
    def get(self):
        account = self.has_access()
        if not account:
            self.redirect(users.create_login_url(self.request.uri))
            return
        player_name = self.request.get('p').lower()

        template_values = {
            'tabs': config.get_tabs(player_name, account),
            'selected_tab': config.TAB_NONE,
        }

        self.response.headers['Content-Type'] = 'application/xhtml+xml'
        path = os.path.join(os.path.dirname(__file__), 'blockplayer.xhtml')
        self.response.out.write(template.render(path, template_values))

    def post(self):
        if not self.has_access():
            self.redirect(users.create_logout_url(config.ADMIN_URL))
            return

        self.response.headers['Content-Type'] = 'text/plain'
        player_name = self.request.get('u')
        if not player_name:
            self.response.out.write('no player name entered')
            return

        choice = self.request.get('choice')
        if not choice:
            self.response.out.write('no choice selected')
            return
            
        p = models.PlayerModel.get(models.playermodel_key(player_name))
        if not p:
            self.response.out.write('cannot find player in database')
            return
            
        if choice == 'block':
            p.blocked = True
        elif choice == 'unblock':
            p.blocked = False
        else:
            self.response.out.write('choice not quarantine or unquarantine')
            return

        p.put()
        self.response.out.write('success. %s is now quarantined=%s.' % (player_name, choice == 'block'))

    def has_access(self):
        # Requires an authenticated user with proper access rights
        account = accounts.account()
        if account and account.BLOCK_PLAYER_ACCESS_RIGHT:
            return account
        return None