[views] Display attributes in entity creation form based on "add" permission Previously, the "update" permission was used. Hence in case the latter is more restrictive that the "add" permission, an user may not be able to set such an attribute, despite she may have "add" permission on it. As a result of the change of permissions action in `editable_attributes` method (add/update depending on whether the entity is being created or modified), the "eid" attribute would have shown up in the edition form. To avoid this, it is moved in the "hidden" section (where it should arguably belong anyways). Closes #4342844.

     1

from logilab.common.shellutils import generate_password

     2

from cubicweb.server.utils import crypt_password

     3

     4

for user in rql('CWUser U WHERE U cw_source S, S name "system", U upassword P, U login L').entities():

     5

    salt = user.upassword.getvalue()

     6

    if crypt_password('', salt) == salt:

     7

        passwd = generate_password()

     8

        print 'setting random password for user %s' % user.login

     9

        user.set_attributes(upassword=passwd)

    10

    11

commit()