"""A private family register, independent from login accounts and camera roles.""" import geography import datetime as dt import json import secrets import family_permissions as permissions from urllib.parse import urlsplit class Family: def __init__(self, app): self.a = app def initialize(self): with self.a.LOCK: self.a.DB.executescript(''' CREATE TABLE IF NOT EXISTS people (id TEXT PRIMARY KEY, body TEXT NOT NULL); CREATE TABLE IF NOT EXISTS family_links (id TEXT PRIMARY KEY, body TEXT NOT NULL); CREATE TABLE IF NOT EXISTS family_events (id TEXT PRIMARY KEY, body TEXT NOT NULL); CREATE TABLE IF NOT EXISTS family_changes ( revision INTEGER PRIMARY KEY, kind TEXT NOT NULL, target_id TEXT NOT NULL, before_json TEXT, after_json TEXT NOT NULL, actor TEXT NOT NULL, at TEXT NOT NULL, restored_from INTEGER); CREATE INDEX IF NOT EXISTS family_changes_target ON family_changes(kind,target_id,revision); ''') self.a.DB.commit() def authorize(self, user, edit=False): self.a.HOUSEHOLDS.scope(user) if not self.a.HOUSEHOLDS.manager(user) and user.get('familyAccess', 'none') not in (('edit',) if edit else ('read', 'edit')): raise self.a.Problem('没有家谱' + ('编辑' if edit else '查看') + '权限', 403) def snapshot(self, user): self.authorize(user) with self.a.LOCK: can_edit = self.a.HOUSEHOLDS.manager(user) or user.get('familyAccess') == 'edit' people = self.a.HOUSEHOLDS.objects(user, 'people') links = self.a.HOUSEHOLDS.objects(user, 'family_links') scope = self.edit_scope(user, people, links) return {'revision': self.a.setting(self.a.HOUSEHOLDS.revision_key(user), 0), 'people': people, 'links': links, 'events': [e for e in self.a.HOUSEHOLDS.objects(user, 'family_events') if can_edit or (e.get('status') == 'published' and not e.get('archived'))], 'canEdit': can_edit and bool(scope['levels']) and not scope['conflict'], 'editScope': scope, 'selfId': scope['selfId'], 'familyId': self.a.HOUSEHOLDS.scope(user)} def edit_scope(self, user, people=None, links=None): a = self.a people = a.HOUSEHOLDS.objects(user, 'people') if people is None else people links = a.HOUSEHOLDS.objects(user, 'family_links') if links is None else links # Always use the account's binding, never a selected graph reference or submitted ID. account = a.get_object('users', user.get('id')) if user.get('id') else None self_id = (account or user).get('personId', '') levels, conflict = permissions.generations(people, links, self_id) granted = a.HOUSEHOLDS.manager(user) or user.get('familyAccess') == 'edit' editable = [key for key in levels if permissions.within(levels, key)] if granted and not conflict else [] note = ('族谱维护限本人上下各五代，所有角色（含超级管理员）相同；远代仍可按权限查看。' if levels else '尚未关联本家庭族谱中的本人，暂不能维护。请在成员与权限中关联本人。') if conflict: note = '亲属关系存在代际冲突，无法可靠确定五代范围，已暂时锁定维护。' can_start = bool(granted and account and not account.get('personId') and a.HOUSEHOLDS.family_of(account) == a.HOUSEHOLDS.scope(user)) return dict(limit=permissions.LIMIT, selfId=self_id if levels else '', levels=levels, conflict=conflict, editablePersonIds=editable, canCreateSelf=can_start, note=note) def check_write(self, user, kind, item, old=None, proposed_people=None, proposed_links=None): scope = self.edit_scope(user) if not scope['levels'] or scope['conflict']: raise self.a.Problem(scope['note'], 403) levels = scope['levels'] if old and any(not permissions.within(levels, key) for key in permissions.targets(kind, old)): raise self.a.Problem('该资料超出本人上下五代维护范围，所有角色均只能查看', 403) if (kind == 'person' and old is not None) or kind == 'event': if any(not permissions.within(levels, key) for key in permissions.targets(kind, item)): raise self.a.Problem('只能维护本人上下五代内且已连接的亲属资料', 403) if proposed_links is not None: next_levels, conflict = permissions.generations(proposed_people, proposed_links, scope['selfId']) if conflict: raise self.a.Problem('这条关系会产生代际冲突，不能据此确定维护范围', 409) # Prevent moving/disconnecting an existing branch and reattaching it closer # to oneself to circumvent the five-generation rule. if any(next_levels.get(key) != value for key, value in levels.items()): raise self.a.Problem('不能改变已确认人物的代际位置或断开其世系；请先补充同代的正确关系', 403) if any(not permissions.within(next_levels, key) for key in permissions.targets(kind, item)): raise self.a.Problem('新增关系或人物超出本人上下五代维护范围', 403) if kind == 'link' and not any(permissions.within(levels, key) for key in permissions.targets(kind, item)): raise self.a.Problem('请从本人上下五代内的已知亲属连接关系', 403) def save(self, kind, data, user, restored_from=None): self.authorize(user, True) a = self.a with a.LOCK: revision_key = a.HOUSEHOLDS.revision_key(user) revision = a.setting(revision_key, 0) if type(data.get('revision')) is not int or data['revision'] != revision: raise a.Problem('家谱已被更新，请重新载入后再编辑', 409) if kind not in ('person', 'link', 'event'): raise a.Problem('家谱记录类型不存在', 404) table = {'person': 'people', 'link': 'family_links', 'event': 'family_events'}[kind] family_id = a.HOUSEHOLDS.prepare(user, table, data, (('people', 'fromId'), ('people', 'toId')) if kind == 'link' else ()) if kind == 'event' and isinstance(data.get('personIds', []), list): for person in data.get('personIds', []): a.HOUSEHOLDS.owns(user, a.get_object('people', person)) old = a.get_object(table, data.get('id')) if data.get('id') and not old: raise a.Problem('家谱记录不存在', 404) item = {'person': self.person, 'link': self.link, 'event': self.event}[kind](data, old) item.update(familyId=family_id, updatedAt=dt.datetime.now(dt.timezone.utc).isoformat(), updatedBy=user['username']) added_link = None bind_self = data.get('asSelf', False) if not isinstance(bind_self, bool): raise a.Problem('本人关联设置不正确') if bind_self and (kind != 'person' or old or not self.edit_scope(user)['canCreateSelf']): raise a.Problem('已有本人关联，不能用另一个人物切换维护范围', 403) people = a.HOUSEHOLDS.objects(user, 'people') links = a.HOUSEHOLDS.objects(user, 'family_links') if kind == 'person' and not old and not bind_self: relative = data.get('relativeId') a.HOUSEHOLDS.owns(user, a.get_object('people', relative)) relation = data.get('relativeKind') if relation not in ('parent', 'child', 'spouse'): raise a.Problem('新增人物时请选择与已有亲属的关系') if relative not in self.edit_scope(user)['editablePersonIds']: raise a.Problem('请选择本人上下五代内可维护的亲属', 403) added_link = dict(id=secrets.token_hex(8), fromId=item['id'] if relation == 'parent' else relative, toId=relative if relation == 'parent' else item['id'], kind='spouse' if relation == 'spouse' else 'parent', active=True, lineage='unspecified', note='', familyId=family_id, updatedAt=item['updatedAt'], updatedBy=user['username']) self.check_write(user, kind, item, proposed_people=people+[item], proposed_links=links+[added_link]) elif kind == 'link': self.check_write(user, kind, item, old, people, [e for e in links if e['id'] != item['id']]+[item]) elif not bind_self: self.check_write(user, kind, item, old) if kind == 'event': item.update(createdAt=old.get('createdAt', item['updatedAt']) if old else item['updatedAt'], createdBy=old.get('createdBy', user['username']) if old else user['username']) # Withdrawal and restoration must retain the first publication time. if old and old.get('publishedAt'): item['publishedAt'] = old['publishedAt'] elif item['status'] == 'published': item['publishedAt'] = item['updatedAt'] # Revision and record are committed together, so concurrent forms cannot overwrite silently. with a.DB: change_revision = a.DB.execute('SELECT COALESCE(MAX(revision),0)+1 FROM family_changes').fetchone()[0] a.DB.execute('INSERT OR REPLACE INTO ' + table + ' VALUES (?,?)', (item['id'], json.dumps(item))) a.DB.execute('INSERT OR REPLACE INTO settings VALUES (?,?)', (revision_key, json.dumps(revision + 1))) a.DB.execute('INSERT INTO family_changes VALUES (?,?,?,?,?,?,?,?)', (change_revision, kind, item['id'], json.dumps(old) if old else None, json.dumps(item), user['username'], item['updatedAt'], restored_from)) if added_link: a.DB.execute('INSERT INTO family_links VALUES (?,?)', (added_link['id'], json.dumps(added_link))) a.DB.execute('INSERT INTO family_changes VALUES (?,?,?,?,?,?,?,?)', (change_revision+1, 'link', added_link['id'], None, json.dumps(added_link), user['username'], item['updatedAt'], None)) if bind_self: account = dict(a.get_object('users', user['id']), personId=item['id']) a.DB.execute('UPDATE users SET body=? WHERE id=?', (json.dumps(account), user['id'])) a.audit({'person': '更新家谱人物', 'link': '更新家谱关系', 'event': '更新家族记事'}[kind], user['username']) return {'item': item, 'revision': revision + 1, 'changeRevision': change_revision} def history(self, user, kind, target_id, before=None): # Previous drafts and withdrawn text are visible only to family editors. self.authorize(user, True) a = self.a table = {'person': 'people', 'link': 'family_links', 'event': 'family_events'}.get(kind) with a.LOCK: if not table or not a.get_object(table, target_id): raise a.Problem('家谱记录不存在', 404) a.HOUSEHOLDS.owns(user, a.get_object(table, target_id)) if before is not None: a.integer(before, 1, 2**53 - 1) rows = a.DB.execute('SELECT * FROM family_changes WHERE kind=? AND target_id=? AND revision 20 else None, revision=a.setting(a.HOUSEHOLDS.revision_key(user), 0)) def change(self, user, change_revision): self.authorize(user, True) self.a.integer(change_revision, 1, 2**53 - 1) with self.a.LOCK: row = self.a.DB.execute('SELECT * FROM family_changes WHERE revision=?', (change_revision,)).fetchone() if not row: raise self.a.Problem('修改记录不存在', 404) self.a.HOUSEHOLDS.owns(user, json.loads(row['after_json'])) return dict(revision=row['revision'], kind=row['kind'], targetId=row['target_id'], before=json.loads(row['before_json']) if row['before_json'] else None, after=json.loads(row['after_json']), at=row['at'], actor=row['actor']) def restore(self, data, user): self.authorize(user, True) with self.a.LOCK: change = self.change(user, data.get('changeRevision')) side = data.get('side') if side not in ('before', 'after') or change[side] is None: raise self.a.Problem('请选择有效的历史版本；创建前没有可恢复的内容') # Reuse all current relationship/date/publication validation. Restore is a new edit, # not an overwrite of history or a rollback of other people's records. return self.save(change['kind'], dict(change[side], revision=data.get('revision')), user, restored_from=change['revision']) def event(self, data, old): a = self.a item = {'id': old['id'] if old else secrets.token_hex(8)} for key, maximum, required in [('title', 160, True), ('eventDate', 10, True), ('sourceName', 160, False), ('sourceUrl', 2000, False)]: item[key] = a.clean_text(data.get(key, ''), maximum, required) try: if dt.date.fromisoformat(item['eventDate']).isoformat() != item['eventDate']: raise ValueError() except ValueError: raise a.Problem('记事日期请填写有效日期，格式为 YYYY-MM-DD') for key, maximum, label in [('summary', 400, '摘要'), ('body', 12000, '正文')]: value = data.get(key, '') if not isinstance(value, str) or len(value) > maximum or any(ord(c) < 32 and c not in '\r\n\t' for c in value): raise a.Problem(f'记事{label}格式不正确，最多 {maximum} 字') item[key] = value.strip() item['personIds'] = data.get('personIds', []) if (not isinstance(item['personIds'], list) or len(item['personIds']) > 200 or any(not isinstance(p, str) or not a.get_object('people', p) for p in item['personIds'])): raise a.Problem('请选择有效的关联人物，最多 200 位') item['personIds'] = list(dict.fromkeys(item['personIds'])) item['status'] = data.get('status', old.get('status', 'draft') if old else 'draft') item['archived'] = data.get('archived', old.get('archived', False) if old else False) if item['status'] not in ('draft', 'published') or not isinstance(item['archived'], bool): raise a.Problem('记事状态不正确') if item['sourceUrl']: try: parsed = urlsplit(item['sourceUrl']) if parsed.scheme not in ('https', 'http') or not parsed.hostname or parsed.username or parsed.password: raise ValueError() parsed.port except ValueError: raise a.Problem('报道链接请填写完整的 http 或 https 地址，不可包含账号密码') if item['status'] == 'published' and not (item['body'] or item['summary'] or item['sourceUrl']): raise a.Problem('发布前请填写记事正文、摘要或报道链接') return item def person(self, data, old): a = self.a item = {'id': old['id'] if old else secrets.token_hex(8)} for key, maximum in [('name', 80), ('alias', 120), ('birthDate', 10), ('deathDate', 10), ('birthplace', 160), ('biography', 2000), ('note', 500)]: value = data.get(key, '') if key in ('biography', 'note'): if not isinstance(value, str) or len(value) > maximum or any(ord(c) < 32 and c not in '\r\n\t' for c in value): raise a.Problem('生平或备注格式不正确') item[key] = value.strip() else: item[key] = a.clean_text(value, maximum, key == 'name') # Keep the legacy combined field verbatim. New structured locations are optional; # old clients updating another field must not erase them. for prefix in ('native', 'birth'): for field in ('Country', 'Province', 'City', 'District', 'Town', 'Community', 'Address'): key = prefix+field value = data.get(key, (old or {}).get(key, '')) if not isinstance(value, str): raise a.Problem('地域信息须为文字') item[key] = a.clean_text(value, 200 if field == 'Address' else 80) for prefix in ('native', 'birth'): geography.apply(item, data, old, a.clean_text, a.Problem, prefix) for key in ('birthDate', 'deathDate'): if item[key]: try: if dt.date.fromisoformat(item[key]).isoformat() != item[key]: raise ValueError() except ValueError: raise a.Problem('日期请使用公历 YYYY-MM-DD；不确定可留空，在备注记录') if item['birthDate'] and item['deathDate'] and item['birthDate'] > item['deathDate']: raise a.Problem('逝世日期不能早于出生日期') item['gender'] = data.get('gender', 'unknown') item['lifeStatus'] = data.get('lifeStatus', 'alive') if item['gender'] not in ('male', 'female', 'unknown') or item['lifeStatus'] not in ('alive', 'deceased', 'unknown'): raise a.Problem('人物属性不正确') if item['deathDate'] and item['lifeStatus'] != 'deceased': raise a.Problem('填写逝世日期时，请选择已故') item['archived'] = data.get('archived', False) if not isinstance(item['archived'], bool): raise a.Problem('归档状态不正确') if not old or item['birthDate'] != old.get('birthDate', ''): self.check_birth_order([e for e in a.objects('family_links') if item['id'] in (e['fromId'], e['toId'])], item) return item def check_birth_order(self, links, proposed_person=None): people = {p['id']: p for p in self.a.objects('people')} if proposed_person: people[proposed_person['id']] = proposed_person for edge in links: if not edge.get('active') or edge['kind'] != 'parent' or edge.get('lineage') != 'biological': continue parent, child = people.get(edge['fromId']), people.get(edge['toId']) if parent and child and parent.get('birthDate') and child.get('birthDate') and parent['birthDate'] >= child['birthDate']: raise self.a.Problem('亲生父母的出生日期必须早于子女，请核对日期或亲子属性') def link(self, data, old): a = self.a left, right = data.get('fromId'), data.get('toId') if not isinstance(left, str) or not isinstance(right, str) or not a.get_object('people', left) or not a.get_object('people', right): raise a.Problem('请先录入关系双方的人物') if left == right: raise a.Problem('不能把人物与自己建立亲属关系') kind = data.get('kind') if kind not in ('parent', 'spouse'): raise a.Problem('关系类型不正确') lineage = data.get('lineage', 'unspecified') if lineage not in ('biological', 'adoptive', 'step', 'unspecified'): raise a.Problem('亲子关系属性不正确') active = data.get('active', True) if not isinstance(active, bool): raise a.Problem('关系状态不正确') item = dict(id=old['id'] if old else secrets.token_hex(8), fromId=left, toId=right, kind=kind, lineage=lineage if kind == 'parent' else 'unspecified', active=active, note=a.clean_text(data.get('note', ''), 300)) self.check_birth_order([item]) links = [e for e in a.objects('family_links') if e.get('active') and e['id'] != item['id']] if active: for e in links: same = (e['fromId'], e['toId']) == (left, right) if kind == 'spouse': same = {e['fromId'], e['toId']} == {left, right} if e['kind'] == kind and same: raise a.Problem('这条关系已经存在', 409) graph = {} for e in links + [item]: if e['kind'] == 'parent': graph.setdefault(e['fromId'], []).append(e['toId']) # Iterative walk supports deep ancestry without Python recursion limits. def reaches(start, target): pending, seen = [start], set() while pending: p = pending.pop() if p in seen: continue seen.add(p) for child in graph.get(p, []): if child == target: return True pending.append(child) return False if kind == 'parent' and reaches(right, left): raise a.Problem('这条关系会形成祖先与后代循环，请检查方向') for e in links + [item]: if e['kind'] == 'spouse' and (reaches(e['fromId'], e['toId']) or reaches(e['toId'], e['fromId'])): raise a.Problem('配偶不能同时是直系祖先或后代，请检查已有关系') return item