# copyright 2003-2012 LOGILAB S.A. (Paris, FRANCE), all rights reserved.

# contact http://www.logilab.fr/ -- mailto:contact@logilab.fr

#

# This file is part of CubicWeb.

#

# CubicWeb is free software: you can redistribute it and/or modify it under the

# terms of the GNU Lesser General Public License as published by the Free

# Software Foundation, either version 2.1 of the License, or (at your option)

# any later version.

#

# CubicWeb is distributed in the hope that it will be useful, but WITHOUT

# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS

# FOR A PARTICULAR PURPOSE.  See the GNU Lesser General Public License for more

# details.

#

# You should have received a copy of the GNU Lesser General Public License along

# with CubicWeb.  If not, see <http://www.gnu.org/licenses/>.

"""Repository users' and internal' sessions."""

__docformat__ = "restructuredtext en"

import sys

import threading

from time import time

from uuid import uuid4

from warnings import warn

from logilab.common.deprecation import deprecated

from logilab.common.textutils import unormalize

from logilab.common.registry import objectify_predicate

from cubicweb import UnknownEid, QueryError, schema, server

from cubicweb.req import RequestSessionBase

from cubicweb.utils import make_uid

from cubicweb.rqlrewrite import RQLRewriter

from cubicweb.server import ShuttingDown

from cubicweb.server.edition import EditedEntity

NO_UNDO_TYPES = schema.SCHEMA_TYPES.copy()

NO_UNDO_TYPES.add('CWCache')

# is / is_instance_of are usually added by sql hooks except when using

# dataimport.NoHookRQLObjectStore, and we don't want to record them

# anyway in the later case

NO_UNDO_TYPES.add('is')

NO_UNDO_TYPES.add('is_instance_of')

NO_UNDO_TYPES.add('cw_source')

# XXX rememberme,forgotpwd,apycot,vcsfile

@objectify_predicate

def is_user_session(cls, req, **kwargs):

    """return 1 when session is not internal.

    This predicate can only be used repository side only. """

    return not req.is_internal_session

@objectify_predicate

def is_internal_session(cls, req, **kwargs):

    """return 1 when session is not internal.

    This predicate can only be used repository side only. """

    return req.is_internal_session

@objectify_predicate

def repairing(cls, req, **kwargs):

    """return 1 when repository is running in repair mode"""

    return req.vreg.config.repairing

class transaction(object):

    """Ensure that the transaction is either commited or rollbacked at exit

    Context manager to enter a transaction for a session: when exiting the

    `with` block on exception, call `session.rollback()`, else call

    `session.commit()` on normal exit

    """

    def __init__(self, session, free_cnxset=True):

        self.session = session

        self.free_cnxset = free_cnxset

    def __enter__(self):

        # ensure session has a cnxset

        self.session.set_cnxset()

    def __exit__(self, exctype, exc, traceback):

        if exctype:

            self.session.rollback(free_cnxset=self.free_cnxset)

        else:

            self.session.commit(free_cnxset=self.free_cnxset)

class hooks_control(object):

    """context manager to control activated hooks categories.

    If mode is session.`HOOKS_DENY_ALL`, given hooks categories will

    be enabled.

    If mode is session.`HOOKS_ALLOW_ALL`, given hooks categories will

    be disabled.

    .. sourcecode:: python

       with hooks_control(self.session, self.session.HOOKS_ALLOW_ALL, 'integrity'):

           # ... do stuff with all but 'integrity' hooks activated

       with hooks_control(self.session, self.session.HOOKS_DENY_ALL, 'integrity'):

           # ... do stuff with none but 'integrity' hooks activated

    This is an internal api, you should rather use

    :meth:`~cubicweb.server.session.Session.deny_all_hooks_but` or

    :meth:`~cubicweb.server.session.Session.allow_all_hooks_but` session

    methods.

    """

    def __init__(self, session, mode, *categories):

        self.session = session

        self.mode = mode

        self.categories = categories

    def __enter__(self):

        self.oldmode, self.changes = self.session.init_hooks_mode_categories(

            self.mode, self.categories)

    def __exit__(self, exctype, exc, traceback):

        self.session.reset_hooks_mode_categories(self.oldmode, self.mode, self.changes)

class security_enabled(object):

    """context manager to control security w/ session.execute,

    By default security is disabled on queries executed on the repository

    side.

    """

    def __init__(self, session, read=None, write=None):

        self.session = session

        self.read = read

        self.write = write

    def __enter__(self):

        self.oldread, self.oldwrite = self.session.init_security(

            self.read, self.write)

    def __exit__(self, exctype, exc, traceback):

        self.session.reset_security(self.oldread, self.oldwrite)

HOOKS_ALLOW_ALL = object()

HOOKS_DENY_ALL = object()

DEFAULT_SECURITY = object() # evaluated to true by design

class Transaction(object):

    """Repository Transaction

    Holds all transaction related data

    Database connections resource:

      :attr:`cnxset`, the connections set to use to execute queries on sources.

      If the transaction is read only, the connection set may be freed between

      actual query. This allows multiple transaction with a reasonable low

      connection set pool size. control mechanism is detailed below

      :attr:`mode`, string telling the connections set handling mode, may be one

      of 'read' (connections set may be freed), 'write' (some write was done in

      the connections set, it can't be freed before end of the transaction),

      'transaction' (we want to keep the connections set during all the

      transaction, with or without writing)

    Internal transaction data:

      :attr:`transaction_data`,is a dictionary containing some shared data

      cleared at the end of the transaction. Hooks and operations may put

      arbitrary data in there, and this may also be used as a communication

      channel between the client and the repository.

      :attr:`pending_operations`, ordered list of operations to be processed on

      commit/rollback

      :attr:`commit_state`, describing the transaction commit state, may be one

      of None (not yet committing), 'precommit' (calling precommit event on

      operations), 'postcommit' (calling postcommit event on operations),

      'uncommitable' (some :exc:`ValidationError` or :exc:`Unauthorized` error

      has been raised during the transaction and so it must be rollbacked).

    Hooks controls:

      :attr:`hooks_mode`, may be either `HOOKS_ALLOW_ALL` or `HOOKS_DENY_ALL`.

      :attr:`enabled_hook_categories`, when :attr:`hooks_mode` is

      `HOOKS_DENY_ALL`, this set contains hooks categories that are enabled.

      :attr:`disabled_hook_categories`, when :attr:`hooks_mode` is

      `HOOKS_ALLOW_ALL`, this set contains hooks categories that are disabled.

    Security level Management:

      :attr:`read_security` and :attr:`write_security`, boolean flags telling if

      read/write security is currently activated.

    """

    def __init__(self, txid, mode, rewriter):

        #: transaction unique id

        self.transactionid = txid

        #: reentrance handling

        self.ctx_count = 0

        #: connection handling mode

        self.mode = mode

        #: connection set used to execute queries on sources

        self.cnxset = None

        #: dict containing arbitrary data cleared at the end of the transaction

        self.transaction_data = {}

        #: ordered list of operations to be processed on commit/rollback

        self.pending_operations = []

        #: (None, 'precommit', 'postcommit', 'uncommitable')

        self.commit_state = None

        ### hook control attribute

        self.hooks_mode = HOOKS_ALLOW_ALL

        self.disabled_hook_cats = set()

        self.enabled_hook_cats = set()

        self.pruned_hooks_cache = {}

        ### security control attributes

        self.read_security = DEFAULT_SECURITY

        self.write_security = DEFAULT_SECURITY

        # RQLRewriter are not thread safe

        self._rewriter = rewriter

    def clear(self):

        """reset internal data"""

        self.transaction_data = {}

        #: ordered list of operations to be processed on commit/rollback

        self.pending_operations = []

        #: (None, 'precommit', 'postcommit', 'uncommitable')

        self.commit_state = None

        self.pruned_hooks_cache = {}

class Session(RequestSessionBase):

    """Repository user session

    This tie all together:

     * session id,

     * user,

     * connections set,

     * other session data.

    About session storage / transactions

    ------------------------------------

    Here is a description of internal session attributes. Besides :attr:`data`

    and :attr:`transaction_data`, you should not have to use attributes

    described here but higher level APIs.

      :attr:`data` is a dictionary containing shared data, used to communicate

      extra information between the client and the repository

      for each running transaction. The key is the transaction id. By default

      the transaction id is the thread name but it can be otherwise (per dbapi

      cursor for instance, or per thread name *from another process*).

      :attr:`__threaddata` is a thread local storage whose `txdata` attribute

      refers to the proper instance of :class:`TransactionData` according to the

      transaction.

      :attr:`_threads_in_transaction` is a set of (thread, connections set)

      referencing threads that currently hold a connections set for the session.

    .. automethod:: cubicweb.server.session.transaction

    You should not have to use neither :attr:`_txdata` nor :attr:`__threaddata`,

    simply access transaction data transparently through the :attr:`_threaddata`

    property. Also, you usually don't have to access it directly since current

    transaction's data may be accessed/modified through properties / methods:

      :attr:`transaction_data`, similarly to :attr:`data`, is a dictionary

      containing some shared data that should be cleared at the end of the

      transaction. Hooks and operations may put arbitrary data in there, and

      this may also be used as a communication channel between the client and

      the repository.

    .. automethod:: cubicweb.server.session.Session.get_shared_data

    .. automethod:: cubicweb.server.session.Session.set_shared_data

    .. automethod:: cubicweb.server.session.Session.added_in_transaction

    .. automethod:: cubicweb.server.session.Session.deleted_in_transaction

    Transaction state information:

      :attr:`running_dbapi_query`, boolean flag telling if the executing query

      is coming from a dbapi connection or is a query from within the repository

      :attr:`cnxset`, the connections set to use to execute queries on sources.

      During a transaction, the connection set may be freed so that is may be

      used by another session as long as no writing is done. This means we can

      have multiple sessions with a reasonably low connections set pool size.

    .. automethod:: cubicweb.server.session.set_cnxset

    .. automethod:: cubicweb.server.session.free_cnxset

      :attr:`mode`, string telling the connections set handling mode, may be one

      of 'read' (connections set may be freed), 'write' (some write was done in

      the connections set, it can't be freed before end of the transaction),

      'transaction' (we want to keep the connections set during all the

      transaction, with or without writing)

      :attr:`pending_operations`, ordered list of operations to be processed on

      commit/rollback

      :attr:`commit_state`, describing the transaction commit state, may be one

      of None (not yet committing), 'precommit' (calling precommit event on

      operations), 'postcommit' (calling postcommit event on operations),

      'uncommitable' (some :exc:`ValidationError` or :exc:`Unauthorized` error

      has been raised during the transaction and so it must be rollbacked).

    .. automethod:: cubicweb.server.session.Session.commit

    .. automethod:: cubicweb.server.session.Session.rollback

    .. automethod:: cubicweb.server.session.Session.close

    .. automethod:: cubicweb.server.session.Session.closed

    Security level Management:

      :attr:`read_security` and :attr:`write_security`, boolean flags telling if

      read/write security is currently activated.

    .. automethod:: cubicweb.server.session.Session.set_write_security

    .. automethod:: cubicweb.server.session.Session.set_read_security

    .. automethod:: cubicweb.server.session.Session.init_security

    .. automethod:: cubicweb.server.session.Session.reset_security

    .. automethod:: cubicweb.server.session.Session.security_enabled

    Hooks Management:

      :attr:`hooks_mode`, may be either `HOOKS_ALLOW_ALL` or `HOOKS_DENY_ALL`.

      :attr:`enabled_hook_categories`, when :attr:`hooks_mode` is

      `HOOKS_DENY_ALL`, this set contains hooks categories that are enabled.

      :attr:`disabled_hook_categories`, when :attr:`hooks_mode` is

      `HOOKS_ALLOW_ALL`, this set contains hooks categories that are disabled.

    .. automethod:: cubicweb.server.session.Session.deny_all_hooks_but

    .. automethod:: cubicweb.server.session.Session.allow_all_hooks_but

    .. automethod:: cubicweb.server.session.Session.is_hook_category_activated

    .. automethod:: cubicweb.server.session.Session.is_hook_activated

    Data manipulation:

    .. automethod:: cubicweb.server.session.Session.add_relation

    .. automethod:: cubicweb.server.session.Session.add_relations

    .. automethod:: cubicweb.server.session.Session.delete_relation

    Other:

    .. automethod:: cubicweb.server.session.Session.call_service

    """

    is_request = False

    is_internal_session = False

    def __init__(self, user, repo, cnxprops=None, _id=None):

        super(Session, self).__init__(repo.vreg)

        self.id = _id or make_uid(unormalize(user.login).encode('UTF8'))

        self.user = user

        self.repo = repo

        self.timestamp = time()

        self.default_mode = 'read'

        # undo support

        if repo.config.creating or repo.config.repairing or self.is_internal_session:

            self.undo_actions = False

        else:

            self.undo_actions = repo.config['undo-enabled']

        # short cut to querier .execute method

        self._execute = repo.querier.execute

        # shared data, used to communicate extra information between the client

        # and the rql server

        self.data = {}

        # i18n initialization

        self.set_language(user.prefered_language())

        # Data local to the thread

        self.__threaddata = threading.local()

        self._threads_in_transaction = set()

        self._closed = False

        self._closed_lock = threading.Lock()

    def __unicode__(self):

        return '<session %s (%s 0x%x)>' % (

            unicode(self.user.login), self.id, id(self))

        if txid is None:

            txid = threading.currentThread().getName()

        try:

        except KeyError:

            rewriter = RQLRewriter(self)

            tx = Transaction(txid, self.default_mode, rewriter)

    @property

    def _threaddata(self):

        try:

            return self.__threaddata.txdata

        except AttributeError:

            return self.__threaddata.txdata

    def get_option_value(self, option, foreid=None):

        return self.repo.get_option_value(option, foreid)

    def transaction(self, free_cnxset=True):

        """return context manager to enter a transaction for the session: when

        exiting the `with` block on exception, call `session.rollback()`, else

        call `session.commit()` on normal exit.