Student admin

app/controllers/admin/routes.py

@@ -44,13 +44,12 @@ def switchUser():
 
     print(f"Switching user from {g.current_user} to",request.form['newuser'])
     session['current_user'] = model_to_dict(User.get_by_id(request.form['newuser']))
-
     return redirect(request.referrer)
 
 
 @admin_bp.route('/eventTemplates')
 def templateSelect():
-    if g.current_user.isCeltsAdmin or g.current_user.isCeltsStudentStaff:
+    if g.current_user.isAdmin:
         allprograms = getAllowedPrograms(g.current_user)
         visibleTemplates = getAllowedTemplates(g.current_user)
         return render_template("/events/template_selector.html",
@@ -145,7 +144,8 @@ def createEvent(templateid, programid):
 @admin_bp.route('/event/<eventId>/rsvp', methods=['GET'])
 def rsvpLogDisplay(eventId):
     event = Event.get_by_id(eventId)
-    if g.current_user.isCeltsAdmin or (g.current_user.isCeltsStudentStaff and g.current_user.isProgramManagerFor(event.program)):
+    isProgramManager = g.current_user.isProgramManagerFor(event.program)
+    if g.current_user.isCeltsAdmin or g.current_user.isCeltsStudentAdmin or isProgramManager:
         allLogs = EventRsvpLog.select(EventRsvpLog, User).join(User).where(EventRsvpLog.event_id == eventId).order_by(EventRsvpLog.createdOn.desc())
         return render_template("/events/rsvpLog.html",
                                 event = event,
@@ -168,8 +168,7 @@ def eventDisplay(eventId):
     except DoesNotExist as e:
         print(f"Unknown event: {eventId}")
         abort(404)
-
-    notPermitted = not (g.current_user.isCeltsAdmin or g.current_user.isProgramManagerForEvent(event))
+    notPermitted = not (g.current_user.isCeltsAdmin or (g.current_user.isCeltsStudentAdmin and event.program_id != 5) or g.current_user.isProgramManagerForEvent(event))
     if 'edit' in request.url_rule.rule and notPermitted:
         abort(403)
 

app/controllers/admin/userManagement.py

@@ -3,7 +3,7 @@
 from app.controllers.admin import admin_bp
 from app.models.user import User
 from app.models.program import Program
-from app.logic.userManagement import addCeltsAdmin,addCeltsStudentStaff,removeCeltsAdmin,removeCeltsStudentStaff
+from app.logic.userManagement import addCeltsAdmin,addCeltsStudentStaff,addCeltsStudentAdmin ,removeCeltsAdmin,removeCeltsStudentStaff, removeCeltsStudentAdmin
 from app.logic.userManagement import changeProgramInfo
 from app.logic.utils import selectSurroundingTerms
 from app.logic.term import addNextTerm, changeCurrentTerm
@@ -24,55 +24,48 @@ def manageUsers():
 
     if method == "addCeltsAdmin":
         if user.isStudent and not user.isCeltsStudentStaff: 
-            flash(user.firstName + " " + user.lastName + " cannot be added as a CELTS-Link admin", 'danger')
+            flash(f"{user.fullName} cannot be added as a CELTS-Link Admin.", 'danger')
         else:
             if user.isCeltsAdmin:
-                flash(user.firstName + " " + user.lastName + " is already a CELTS-Link Admin", 'danger')
+                flash(f"{user.fullName} is already a CELTS-Link Admin.", 'danger')
             else: 
                 addCeltsAdmin(user)
-                flash(user.firstName + " " + user.lastName + " has been added as a CELTS-Link Admin", 'success')
+                flash(f"{user.fullName} has been added as a CELTS-Link Admin.", 'success')
     elif method == "addCeltsStudentStaff":
         if not user.isStudent:
-            flash(username + " cannot be added as CELTS Student Staff", 'danger')
+            flash(username + " cannot be added as CELTS Student Staff.", 'danger')
         else:
             if user.isCeltsStudentStaff:
-                flash(user.firstName + " " + user.lastName + " is already a CELTS Student Staff", 'danger')
+                flash(f"{user.fullName} is already a CELTS Student Staff.", 'danger')
             else:
                 addCeltsStudentStaff(user)
-                flash(user.firstName + " " + user.lastName + " has been added as a CELTS Student Staff", 'success')
+                flash(f"{user.fullName} has been added as a CELTS Student Staff.", 'success')
+    elif method == "addCeltsStudentAdmin":
+        if user.isStudent: 
+            addCeltsStudentAdmin(user)
+            flash(f"{user.fullName} has been added as a CELTS Student Admin.", 'success')
+
+        elif user.isCeltsStudentAdmin:
+            flash(f"{user.fullName} is already a CELTS Student Admin.", 'danger')
+        else: 
+            flash(username + " cannot be added as CELTS Student Admin.", 'danger')
+
     elif method == "removeCeltsAdmin":
         removeCeltsAdmin(user)
-        flash(user.firstName + " " + user.lastName + " is no longer a CELTS Admin ", 'success')
+        flash(f"{user.fullName} is no longer a CELTS Admin.", 'success')
     elif method == "removeCeltsStudentStaff":
         removeCeltsStudentStaff(user)
-        flash(user.firstName + " " + user.lastName + " is no longer a CELTS Student Staff", 'success')
+        flash(f"{user.fullName} is no longer a CELTS Student Staff.", 'success')
+    elif method == "removeCeltsStudentAdmin":
+        removeCeltsStudentAdmin(user)
+        flash(f"{user.fullName} is no longer a CELTS Student Admin.", 'success')
     return ("success")
 
-@admin_bp.route('/addProgramManagers', methods=['POST'])
-def addProgramManagers():
-    eventData = request.form
-    try:
-        return addProgramManager(eventData['username'],int(eventData['programID']))
-    except Exception as e:
-        print(e)
-        flash('Error while trying to add a manager.','warning')
-        abort(500,"'Error while trying to add a manager.'")
-
-@admin_bp.route('/removeProgramManagers', methods=['POST'])
-def removeProgramManagers():
-    eventData = request.form
-    try:
-        return removeProgramManager(eventData['username'],int(eventData['programID']))
-    except Exception as e:
-        print(e)
-        flash('Error while removing a manager.','warning')
-        abort(500,"Error while trying to remove a manager.")
-
 @admin_bp.route('/admin/updateProgramInfo/<programID>', methods=['POST'])
 def updateProgramInfo(programID):
     """Grabs info and then outputs it to logic function"""
     programInfo = request.form # grabs user inputs
-    if g.current_user.isCeltsAdmin:
+    if g.current_user.isCeltsAdmin or g.current_user.isCeltsStudentAdmin:
         try:
             changeProgramInfo(programInfo["programName"],  #calls logic function to add data to database
                               programInfo["contactEmail"],
@@ -94,12 +87,14 @@ def userManagement():
     current_programs = Program.select()
     currentAdmins = list(User.select().where(User.isCeltsAdmin))
     currentStudentStaff = list(User.select().where(User.isCeltsStudentStaff))
-    if g.current_user.isCeltsAdmin:
+    currentStudentAdmin = list(User.select().where(User.isCeltsStudentAdmin))
+    if g.current_user.isCeltsAdmin or g.current_user.isCeltsStudentAdmin:
         return render_template('admin/userManagement.html',
                                 terms = terms,
                                 programs = list(current_programs),
                                 currentAdmins = currentAdmins,
                                 currentStudentStaff = currentStudentStaff,
+                                currentStudentAdmin = currentStudentAdmin,
                                 )
     abort(403)
 

app/controllers/admin/volunteers.py

@@ -57,37 +57,42 @@ def manageVolunteersPage(eventID):
         if not (g.current_user.isCeltsAdmin or (g.current_user.isCeltsStudentStaff and g.current_user.isProgramManagerForEvent(event))):
             abort(403)
 
-        # ------- Grab the different lists of participants -------
-        trainedParticipantsForProgramAndTerm = trainedParticipants(event.program, event.term)
-
-        bannedUsersForProgram = [bannedUser.user for bannedUser in getBannedUsers(event.program)]
-
-        eventNonAttendedData, eventWaitlistData, eventVolunteerData, eventParticipants = sortParticipantsByStatus(event)
-
-        allRelevantUsers = [participant.user for participant in (eventParticipants + eventNonAttendedData + eventWaitlistData)]
-
-        # ----------- Get miscellaneous data -----------
-
-        participationStatusForTrainings = getParticipationStatusForTrainings(event.program, allRelevantUsers, event.term)
-
-        eventLengthInHours = getEventLengthInHours(event.timeStart, event.timeEnd, event.startDate)
-
-        recurringVolunteers = getPreviousRecurringEventData(event.recurringId)
-
-        currentRsvpAmount = getEventRsvpCount(event.id)
-
-        # ----------- Render template with all of the data ------------
-        return render_template("/events/manageVolunteers.html",
-                                eventVolunteerData = eventVolunteerData,
-                                eventNonAttendedData = eventNonAttendedData,
-                                eventWaitlistData = eventWaitlistData,
-                                eventLength = eventLengthInHours,
-                                event = event,
-                                recurringVolunteers = recurringVolunteers,
-                                bannedUsersForProgram = bannedUsersForProgram,
-                                trainedParticipantsForProgramAndTerm = trainedParticipantsForProgramAndTerm,
-                                participationStatusForTrainings = participationStatusForTrainings,
-                                currentRsvpAmount = currentRsvpAmount)
+    isProgramManager = g.current_user.isProgramManagerForEvent(event)
+
+    if not (g.current_user.isCeltsAdmin or g.current_user.isCeltsStudentAdmin or isProgramManager):
+        abort(403)
+    # ------- Grab the different lists of participants -------
+    trainedParticipantsForProgramAndTerm = trainedParticipants(event.program, event.term)
+
+    bannedUsersForProgram = [bannedUser.user for bannedUser in getBannedUsers(event.program)]
+
+    eventNonAttendedData, eventWaitlistData, eventVolunteerData, eventParticipants = sortParticipantsByStatus(event)
+
+    allRelevantUsers = [participant.user for participant in (eventParticipants + eventNonAttendedData + eventWaitlistData)]
+
+    # ----------- Get miscellaneous data -----------
+
+    participationStatusForTrainings = getParticipationStatusForTrainings(event.program, allRelevantUsers, event.term)
+
+    eventLengthInHours = getEventLengthInHours(event.timeStart, event.timeEnd, event.startDate)
+
+    recurringVolunteers = getPreviousRecurringEventData(event.recurringId)
+
+    currentRsvpAmount = getEventRsvpCount(event.id)
+
+    # ----------- Render template with all of the data ------------
+
+    return render_template("/events/manageVolunteers.html",
+                            eventVolunteerData = eventVolunteerData,
+                            eventNonAttendedData = eventNonAttendedData,
+                            eventWaitlistData = eventWaitlistData,
+                            eventLength = eventLengthInHours,
+                            event = event,
+                            recurringVolunteers = recurringVolunteers,
+                            bannedUsersForProgram = bannedUsersForProgram,
+                            trainedParticipantsForProgramAndTerm = trainedParticipantsForProgramAndTerm,
+                            participationStatusForTrainings = participationStatusForTrainings,
+                            currentRsvpAmount = currentRsvpAmount)
 
 @admin_bp.route('/event/<eventID>/volunteer_details', methods=['GET'])
 def volunteerDetailsPage(eventID):
@@ -97,7 +102,7 @@ def volunteerDetailsPage(eventID):
         print(f"No event found for {eventID}", e)
         abort(404)
 
-    if not (g.current_user.isCeltsAdmin or (g.current_user.isCeltsStudentStaff and g.current_user.isProgramManagerForEvent(event))):
+    if not (g.current_user.isCeltsAdmin or g.current_user.isCeltsStudentAdmin or g.current_user.isProgramManagerForEvent(event)):
         abort(403)
 
     eventRsvpData = list(EventRsvp.select(EmergencyContact, EventRsvp)

app/logic/userManagement.py

@@ -11,22 +11,26 @@ def addCeltsAdmin(user):
     user = User.get_by_id(user)
     user.isCeltsAdmin = True
     user.save()
-    createAdminLog(f'Made {user.firstName} {user.lastName} a CELTS admin member.')
+    createAdminLog(f'Made f"{user.fullName} a CELTS admin member.')
 
 
 def addCeltsStudentStaff(user):
     user = User.get_by_id(user)
     user.isCeltsStudentStaff = True
     user.save()
-    createAdminLog(f'Made {user.firstName} {user.lastName} a CELTS student staff member.')
+    createAdminLog(f'Made f"{user.fullName} a CELTS student staff member.')
 
+def addCeltsStudentAdmin(user):
+    user = User.get_by_id(user)
+    user.isCeltsStudentAdmin = True
+    user.save()
+    createAdminLog(f'Made {user.fullName} a CELTS student admin member.')
 
 def removeCeltsAdmin(user):
     user = User.get_by_id(user)
     user.isCeltsAdmin = False
     user.save()
-    createAdminLog(f'Removed {user.firstName} {user.lastName} from CELTS admins.')
-
+    createAdminLog(f'Removed f"{user.fullName} from CELTS admins.')
 
 def removeCeltsStudentStaff(user):
     user = User.get_by_id(user)
@@ -38,6 +42,11 @@ def removeCeltsStudentStaff(user):
     createAdminLog(f'Removed {user.firstName} {user.lastName} from a CELTS student staff member'+ 
                    (f', and as a manager of {programManagerRoles}.' if programManagerRoles else "."))
 
+def removeCeltsStudentAdmin(user):
+    user = User.get_by_id(user)
+    user.isCeltsStudentAdmin = False
+    user.save()
+    createAdminLog(f'Removed f"{user.fullName} from a CELTS student admin member.')
 
 def changeProgramInfo(newProgramName, newContactEmail, newContactName, newLocation, programId):
     """Updates the program info with a new sender and email."""
@@ -59,14 +68,16 @@ def getAllowedPrograms(currentUser):
     """Returns a list of all visible programs depending on who the current user is."""
     if currentUser.isCeltsAdmin:
         return Program.select().order_by(Program.programName)
+    elif currentUser.isCeltsStudentAdmin:
+        return Program.select().where(Program.id !=5).order_by(Program.programName)
     else:
         return Program.select().join(ProgramManager).where(ProgramManager.user==currentUser).order_by(Program.programName)
 
 
 
 def getAllowedTemplates(currentUser):
     """Returns a list of all visible templates depending on who the current user is. If they are not an admin it should always be none."""
-    if currentUser.isCeltsAdmin:
+    if currentUser.isCeltsAdmin or currentUser.isCeltsStudentAdmin:
         return EventTemplate.select().where(EventTemplate.isVisible==True).order_by(EventTemplate.name)
     else:
         return []

app/models/user.py

@@ -16,6 +16,7 @@ class User(baseModel):
     isStaff = BooleanField(default = False)
     isCeltsAdmin = BooleanField(default  =False)
     isCeltsStudentStaff = BooleanField(default = False)
+    isCeltsStudentAdmin = BooleanField(default = False)
     dietRestriction = TextField(null=True)
     minorInterest = BooleanField(default=False)
 
@@ -28,7 +29,7 @@ def __init__(self,*args, **kwargs):
 
     @property
     def isAdmin(self):
-        return (self.isCeltsAdmin or self.isCeltsStudentStaff)
+        return (self.isCeltsAdmin or self.isCeltsStudentAdmin or self.isCeltsStudentStaff)
 
     @property
     def isBonnerScholar(self):

app/static/js/userManagement.js

@@ -6,6 +6,9 @@ function callbackAdmin(selected){
 function callbackStudentStaff(selected){
     submitRequest("addCeltsStudentStaff", selected.username)
 }
+function callbackStudentAdmin(selected){
+  submitRequest("addCeltsStudentAdmin", selected.username)
+}
 $(document).ready(function(){
   // Admin Management
   $("#searchCeltsAdminInput").on("input", function(){
@@ -14,6 +17,10 @@ $(document).ready(function(){
   $("#searchCeltsStudentStaffInput").on("input", function(){
       searchUser("searchCeltsStudentStaffInput", callbackStudentStaff, false, null, "student")
   });
+
+  $("#searchCeltsStudentAdminInput").on("input", function(){
+    searchUser("searchCeltsStudentAdminInput", callbackStudentAdmin, false, null, "student")
+  });
   $("#addNewTerm").on("click",function(){
     addNewTerm();
   });
@@ -23,6 +30,9 @@ $(document).ready(function(){
   $(".removeStudentStaff").on("click",function(){
     submitRequest("removeCeltsStudentStaff", $(this).data("username"));
   });
+  $(".removeStudentAdmin").on("click",function(){
+    submitRequest("removeCeltsStudentAdmin", $(this).data("username"));
+  });
   $('#searchCeltsAdminInput').keydown(function(e){
       if (e.key === "Enter"){
           submitRequest("addCeltsAdmin", $(this).val())
@@ -33,7 +43,11 @@ $(document).ready(function(){
           submitRequest("addCeltsStudentStaff", $(this).val())
       }
   });
-
+  $('#searchCeltsStudentAdminInput').keydown(function(e){
+    if (e.key === "Enter"){
+        submitRequest("addCeltsStudentAdmin", $(this).val())
+    }
+});
   for (var i = 1; i <= $('#currentTermList .term-btn').length; i++){
     $("#termFormID_" + i).on("click", function(){
       $(".term-btn").removeClass("active");