Merge pull request #171 from akretion/7-secure-uninstall

[ADD] secure_uninstall module

secure_uninstall/README.md

@@ -0,0 +1,5 @@
+Secure Uninstall
+================
+
+Ask Master Password ('admin_passwd' key from config file)
+before to proceed to module uninstallation

secure_uninstall/__init__.py

@@ -0,0 +1 @@
+from . import module

secure_uninstall/__openerp__.py

@@ -0,0 +1,50 @@
+# coding: utf-8
+##############################################################################
+#
+#    Copyright (C) All Rights Reserved 2014 Akretion
+#    @author David BEAL <david.beal@akretion.com>
+#
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU Affero General Public License as
+#    published by the Free Software Foundation, either version 3 of the
+#    License, or (at your option) any later version.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU Affero General Public License for more details.
+#
+#    You should have received a copy of the GNU Affero General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+###############################################################################
+
+{
+    'name': 'Secure Uninstall',
+    'version': '0.1',
+    'author': "Akretion,Odoo Community Association (OCA)",
+    'maintener': 'Akretion',
+    'category': 'Base',
+    'summary': "Ask password to authorize uninstall",
+    'depends': [
+        'base',
+    ],
+    'description': """
+Secure Uninstall
+================
+
+Ask Master Password ('admin_passwd' key from config file)
+before to proceed to module uninstallation
+
+
+Contributors
+------------
+* David BEAL <david.beal@akretion.com>
+
+""",
+    'data': ['wizard_view.xml'],
+    'website': 'http://www.akretion.com/',
+    'license': 'AGPL-3',
+    'tests': [],
+    'installable': True,
+}

secure_uninstall/module.py

@@ -0,0 +1,86 @@
+# coding: utf-8
+##############################################################################
+#
+#    Copyright (C) All Rights Reserved 2014 Akretion
+#    @author David BEAL <david.beal@akretion.com>
+#
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU Affero General Public License as
+#    published by the Free Software Foundation, either version 3 of the
+#    License, or (at your option) any later version.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU Affero General Public License for more details.
+#
+#    You should have received a copy of the GNU Affero General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+###############################################################################
+
+from openerp.osv import orm, fields
+from openerp.tools.config import config
+
+
+class Module(orm.Model):
+    _inherit = 'ir.module.module'
+
+    def button_uninstall(self, cr, uid, ids, context=None):
+        if not context:
+            context = {}
+        if 'uninstall_authorized' in context:
+            ctx = context.copy()
+            del ctx['uninstall_authorized']
+            super(Module, self).button_uninstall(
+                cr, uid, ids, context=ctx)
+            return self._button_immediate_function(
+                cr, uid, ids, self.button_uninstall, context=ctx)
+        else:
+            _, view_id = self.pool['ir.model.data'].get_object_reference(
+                cr, uid, 'secure_uninstall', 'view_uninstall_wizard_form')
+            return {
+                'view_id': view_id,
+                'view_mode': 'form',
+                'res_model': 'uninstall.check.wizard',
+                'context': {'module_id': ids[0]},
+                'name': "Uninstall Authorization",
+                'type': 'ir.actions.act_window',
+                'target': 'new',
+            }
+
+
+class UninstallCheckWizard(orm.TransientModel):
+    _name = 'uninstall.check.wizard'
+
+    _columns = {
+        'password': fields.char(
+            string='Password', required=True,
+            help="'admin_passwd' value from Odoo configuration file "
+                 "(aka 'Master Password')")
+    }
+
+    def check_password(self, cr, uid, ids, context=None):
+        for elm in self.browse(cr, uid, ids, context=context):
+            config_passwd = config.get("admin_passwd")
+            if not config_passwd:
+                raise orm.except_orm(
+                    'Missing configuration key',
+                    "'admin_passwd' configuration key "
+                    "(aka 'Master Password') is not set in \n"
+                    "your Odoo server configuration file: "
+                    "please set it a value")
+            if elm.password != config_passwd:
+                raise orm.except_orm(
+                    "Password Error",
+                    "Issue\n_____\nProvided password '%s' doesn't match with "
+                    "'Master Password' ('admin_passwd' key) found in the "
+                    "Odoo server configuration file ."
+                    "\n\nResolution\n__________\n"
+                    "Please check your password and retry or cancel"
+                    % elm.password)
+            context['uninstall_authorized'] = True
+            module_id = context.get('module_id')
+            self.pool['ir.module.module'].button_uninstall(
+                cr, uid, [module_id], context=context)
+        return True

secure_uninstall/wizard_view.xml

@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<openerp>
+    <data>
+
+
+<record id="view_uninstall_wizard_form" model="ir.ui.view">
+    <field name="model">uninstall.check.wizard</field>
+    <field name="arch" type="xml">
+        <form string="Check" version="7.0">
+            <p class="oe_inline oe_grey">
+Uninstall module process remove all data managed by the module.<br/>
+Some columns can be dropped and there is no way to recover that except restoring a database backup
+            </p>
+            <label string="If you want uninstall module, write required password."
+                   colspan="4" />
+            <group col="4">
+                <field name="password" password="True"/>
+                <span/>
+            </group>
+            <footer>
+                <button name="check_password" string="Apply" type="object"
+                        class="oe_highlight"/>
+                <button special="cancel" string="Cancel" class="oe_link"/>
+            </footer>
+        </form>
+    </field>
+</record>
+
+
+    </data>
+</openerp>