Coverage for app/controllers/admin/routes.py: 22%

455 statements  

« prev     ^ index     » next       coverage.py v7.10.2, created at 2025-12-18 20:14 +0000

1from flask import request, render_template, url_for, g, redirect 

2from flask import flash, abort, jsonify, session, send_file 

3from peewee import DoesNotExist, fn, IntegrityError 

4from playhouse.shortcuts import model_to_dict 

5import json 

6from datetime import datetime 

7import os 

8 

9from app import app 

10from app.models.backgroundCheck import BackgroundCheck 

11from app.models.program import Program 

12from app.models.event import Event 

13from app.models.eventRsvp import EventRsvp 

14from app.models.eventParticipant import EventParticipant 

15from app.models.user import User 

16from app.models.course import Course 

17from app.models.courseInstructor import CourseInstructor 

18from app.models.courseParticipant import CourseParticipant 

19from app.models.eventTemplate import EventTemplate 

20from app.models.activityLog import ActivityLog 

21from app.models.eventRsvpLog import EventRsvpLog 

22from app.models.attachmentUpload import AttachmentUpload 

23from app.models.bonnerCohort import BonnerCohort 

24from app.models.eventCohort import EventCohort 

25from app.models.certification import Certification 

26from app.models.user import User 

27from app.models.term import Term 

28from app.models.eventViews import EventView 

29from app.models.courseStatus import CourseStatus 

30 

31from app.logic.userManagement import getAllowedPrograms, getAllowedTemplates 

32from app.logic.createLogs import createActivityLog 

33from app.logic.certification import getCertRequirements, updateCertRequirements 

34from app.logic.utils import selectSurroundingTerms, getFilesFromRequest, getRedirectTarget, setRedirectTarget 

35from app.logic.events import attemptSaveMultipleOfferings, cancelEvent, deleteEvent, attemptSaveEvent, preprocessEventData, getRepeatingEventsData, deleteEventAndAllFollowing, deleteAllEventsInSeries, getBonnerEvents,addEventView, getEventRsvpCount, copyRsvpToNewEvent, getCountdownToEvent, calculateNewSeriesId, inviteCohortsToEvent, updateEventCohorts 

36from app.logic.participants import getParticipationStatusForTrainings, checkUserRsvp 

37from app.logic.minor import getMinorInterest 

38from app.logic.fileHandler import FileHandler 

39from app.logic.bonner import getBonnerCohorts, makeBonnerXls, rsvpForBonnerCohort, addBonnerCohortToRsvpLog 

40from app.logic.serviceLearningCourses import parseUploadedFile, saveCourseParticipantsToDatabase, unapprovedCourses, approvedCourses, getImportedCourses, getInstructorCourses, editImportedCourses 

41 

42from app.controllers.admin import admin_bp 

43from app.logic.volunteerSpreadsheet import createSpreadsheet 

44 

45 

46@admin_bp.route('/admin/reports') 

47def reports(): 

48 academicYears = Term.select(Term.academicYear).distinct().order_by(Term.academicYear.desc()) 

49 academicYears = list(map(lambda t: t.academicYear, academicYears)) 

50 return render_template("/admin/reports.html", academicYears=academicYears) 

51 

52@admin_bp.route('/admin/reports/download', methods=['POST']) 

53def downloadFile(): 

54 academicYear = request.form.get('academicYear') 

55 filepath = os.path.abspath(createSpreadsheet(academicYear)) 

56 return send_file(filepath, as_attachment=True) 

57 

58 

59 

60@admin_bp.route('/switch_user', methods=['POST']) 

61def switchUser(): 

62 if app.env == "production": 

63 print(f"An attempt was made to switch to another user by {g.current_user.username}!") 

64 abort(403) 

65 

66 print(f"Switching user from {g.current_user} to",request.form['newuser']) 

67 session['current_user'] = model_to_dict(User.get_by_id(request.form['newuser'])) 

68 

69 return redirect(request.referrer) 

70 

71 

72@admin_bp.route('/eventTemplates') 

73def templateSelect(): 

74 programs = getAllowedPrograms(g.current_user) 

75 if not programs: 

76 abort(403) 

77 visibleTemplates = getAllowedTemplates(g.current_user) 

78 return render_template("/events/templateSelector.html", 

79 programs=programs, 

80 celtsSponsoredProgram = Program.get(Program.isOtherCeltsSponsored), 

81 templates=visibleTemplates) 

82 

83@admin_bp.route('/eventTemplates/<templateid>/<programid>/create', methods=['GET','POST']) 

84def createEvent(templateid, programid): 

85 if not (g.current_user.isCeltsAdmin or g.current_user.isProgramManagerFor(programid)): 

86 abort(403) 

87 

88 # Validate given URL 

89 program = None 

90 try: 

91 template = EventTemplate.get_by_id(templateid) 

92 if programid: 

93 program = Program.get_by_id(programid) 

94 except DoesNotExist as e: 

95 print("Invalid template or program id:", e) 

96 flash("There was an error with your selection. Please try again or contact Systems Support.", "danger") 

97 return redirect(url_for("admin.program_picker")) 

98 

99 # Get the data from the form or from the template 

100 eventData = template.templateData 

101 eventData['program'] = program 

102 

103 if request.method == "GET": 

104 eventData['contactName'] = "CELTS Admin" 

105 eventData['contactEmail'] = app.config['celts_admin_contact'] 

106 if program: 

107 eventData['location'] = program.defaultLocation 

108 if program.contactName: 

109 eventData['contactName'] = program.contactName 

110 if program.contactEmail: 

111 eventData['contactEmail'] = program.contactEmail 

112 

113 # Try to save the form 

114 if request.method == "POST": 

115 savedEvents = None 

116 eventData.update(request.form.copy()) 

117 eventData = preprocessEventData(eventData) 

118 

119 if eventData.get('isSeries'): 

120 eventData['seriesData'] = json.loads(eventData['seriesData']) 

121 succeeded, savedEvents, failedSavedOfferings = attemptSaveMultipleOfferings(eventData, getFilesFromRequest(request)) 

122 if not succeeded: 

123 for index, validationErrorMessage in failedSavedOfferings: 

124 eventData['seriesData'][index]['isDuplicate'] = True 

125 validationErrorMessage = failedSavedOfferings[-1][1] # The last validation error message from the list of offerings if there are multiple 

126 print(f"Failed to save offerings {failedSavedOfferings}") 

127 else: 

128 try: 

129 savedEvents, validationErrorMessage = attemptSaveEvent(eventData, getFilesFromRequest(request)) 

130 except Exception as e: 

131 print("Failed saving regular event", e) 

132 validationErrorMessage = "Failed to save event." 

133 

134 if savedEvents: 

135 rsvpCohorts = request.form.getlist("cohorts[]") 

136 if rsvpCohorts: 

137 success, message, invitedCohorts = inviteCohortsToEvent(savedEvents[0], rsvpCohorts) 

138 if not success: 

139 flash(message, 'warning') 

140 

141 noun = ((eventData.get('isSeries')) and "Events" or "Event") # pluralize 

142 flash(f"{noun} successfully created!", 'success') 

143 

144 

145 if program: 

146 if len(savedEvents) > 1 and eventData.get('isRepeating'): 

147 createActivityLog(f"Created a repeating series, <a href=\"{url_for('admin.eventDisplay', eventId = savedEvents[0].id)}\">{savedEvents[0].name[:-7]}</a>, for {program.programName}, with a start date of {datetime.strftime(savedEvents[0].startDate, '%m/%d/%Y')}. The last event in the series will be on {datetime.strftime(savedEvents[-1].startDate, '%m/%d/%Y')}.") 

148 elif len(savedEvents) >= 1 and eventData.get('isSeries'): 

149 eventDates = [eventData.startDate.strftime('%m/%d/%Y') for eventData in savedEvents] 

150 eventList = ', '.join(f"<a href=\"{url_for('admin.eventDisplay', eventId=event.id)}\">{event.name}</a>" for event in savedEvents) 

151 

152 if len(savedEvents) > 1: 

153 #creates list of events created in a multiple series to display in the logs 

154 eventList = ', '.join(eventList.split(', ')[:-1]) + f', and ' + eventList.split(', ')[-1] 

155 #get last date and stick at the end after 'and' so that it reads like a sentence in admin log 

156 lastEventDate = eventDates[-1] 

157 eventDates = ', '.join(eventDates[:-1]) + f', and {lastEventDate}' 

158 

159 createActivityLog(f"Created series {eventList} for {program.programName}, with start dates of {eventDates}.") 

160 

161 else: 

162 createActivityLog(f"Created event <a href=\"{url_for('admin.eventDisplay', eventId = savedEvents[0].id)}\">{savedEvents[0].name}</a> for {program.programName}, with a start date of {datetime.strftime(eventData['startDate'], '%m/%d/%Y')}.") 

163 else: 

164 createActivityLog(f"Created a non-program event, <a href=\"{url_for('admin.eventDisplay', eventId = savedEvents[0].id)}\">{savedEvents[0].name}</a>, with a start date of {datetime.strftime(eventData['startDate'], '%m/%d/%Y')}.") 

165 

166 return redirect(url_for("admin.eventDisplay", eventId = savedEvents[0].id)) 

167 else: 

168 flash(validationErrorMessage, 'warning') 

169 

170 # make sure our data is the same regardless of GET or POST 

171 preprocessEventData(eventData) 

172 isProgramManager = g.current_user.isProgramManagerFor(programid) 

173 

174 requirements, bonnerCohorts = [], [] 

175 if eventData['program'] is not None and eventData['program'].isBonnerScholars: 

176 requirements = getCertRequirements(Certification.BONNER) 

177 rawBonnerCohorts = getBonnerCohorts(limit=5) 

178 bonnerCohorts = {} 

179 

180 for year, cohort in rawBonnerCohorts.items(): 

181 if cohort: 

182 bonnerCohorts[year] = cohort 

183 

184 

185 return render_template(f"/events/{template.templateFile}", 

186 template = template, 

187 eventData = eventData, 

188 termList = selectSurroundingTerms(g.current_term, prevTerms=0), 

189 requirements = requirements, 

190 bonnerCohorts = bonnerCohorts, 

191 isProgramManager = isProgramManager) 

192 

193 

194@admin_bp.route('/event/<eventId>/rsvp', methods=['GET']) 

195def rsvpLogDisplay(eventId): 

196 event = Event.get_by_id(eventId) 

197 if g.current_user.isCeltsAdmin or (g.current_user.isCeltsStudentStaff and g.current_user.isProgramManagerFor(event.program)): 

198 allLogs = EventRsvpLog.select(EventRsvpLog, User).join(User, on=(EventRsvpLog.createdBy == User.username)).where(EventRsvpLog.event_id == eventId).order_by(EventRsvpLog.createdOn.desc()) 

199 return render_template("/events/rsvpLog.html", 

200 event = event, 

201 allLogs = allLogs) 

202 else: 

203 abort(403) 

204 

205@admin_bp.route('/event/<eventId>/renew', methods=['POST']) 

206def renewEvent(eventId): 

207 try: 

208 formData = request.form 

209 try: 

210 assert formData['timeStart'] < formData['timeEnd'] 

211 except AssertionError: 

212 flash("End time must be after start time", 'warning') 

213 return redirect(url_for('admin.eventDisplay', eventId = eventId)) 

214 

215 try: 

216 if formData.get('dateEnd'): 

217 assert formData['dateStart'] < formData['dateEnd'] 

218 except AssertionError: 

219 flash("End date must be after start date", 'warning') 

220 return redirect(url_for('admin.eventDisplay', eventId = eventId)) 

221 

222 

223 priorEvent = model_to_dict(Event.get_by_id(eventId)) 

224 newEventDict = priorEvent.copy() 

225 newEventDict.pop('id') 

226 newEventDict.update({ 

227 'program': int(priorEvent['program']['id']), 

228 'term': int(priorEvent['term']['id']), 

229 'timeStart': formData['timeStart'], 

230 'timeEnd': formData['timeEnd'], 

231 'location': formData['location'], 

232 'startDate': f'{formData["startDate"][-4:]}-{formData["startDate"][0:-5]}', 

233 'isRepeating': bool(priorEvent['isRepeating']), 

234 'seriesId': priorEvent['seriesId'], 

235 }) 

236 newEvent, message = attemptSaveEvent(newEventDict, renewedEvent = True) 

237 if message: 

238 flash(message, "danger") 

239 return redirect(url_for('admin.eventDisplay', eventId = eventId)) 

240 

241 copyRsvpToNewEvent(priorEvent, newEvent[0]) 

242 createActivityLog(f"Renewed {priorEvent['name']} as <a href='event/{newEvent[0].id}/view'>{newEvent[0].name}</a>.") 

243 flash("Event successfully renewed.", "success") 

244 return redirect(url_for('admin.eventDisplay', eventId = newEvent[0].id)) 

245 

246 

247 except Exception as e: 

248 print("Error while trying to renew event:", e) 

249 flash("There was an error renewing the event. Please try again or contact Systems Support.", 'danger') 

250 return redirect(url_for('admin.eventDisplay', eventId = eventId)) 

251 

252 

253 

254@admin_bp.route('/event/<eventId>/view', methods=['GET']) 

255@admin_bp.route('/event/<eventId>/edit', methods=['GET','POST']) 

256def eventDisplay(eventId): 

257 pageViewsCount = EventView.select().where(EventView.event == eventId).count() 

258 if request.method == 'GET' and request.path == f'/event/{eventId}/view': 

259 viewer = g.current_user 

260 event = Event.get_by_id(eventId) 

261 addEventView(viewer,event) 

262 # Validate given URL 

263 try: 

264 event = Event.get_by_id(eventId) 

265 invitedCohorts = list(EventCohort.select().where( 

266 EventCohort.event == event 

267 )) 

268 invitedYears = [str(cohort.year) for cohort in invitedCohorts] 

269 except DoesNotExist as e: 

270 print(f"Unknown event: {eventId}") 

271 abort(404) 

272 

273 notPermitted = not (g.current_user.isCeltsAdmin or g.current_user.isProgramManagerForEvent(event)) 

274 if 'edit' in request.url_rule.rule and notPermitted: 

275 abort(403) 

276 

277 eventData = model_to_dict(event, recurse=False) 

278 associatedAttachments = AttachmentUpload.select().where(AttachmentUpload.event == event) 

279 filepaths = FileHandler(eventId=event.id).retrievePath(associatedAttachments) 

280 

281 image = None 

282 picurestype = [".jpeg", ".png", ".gif", ".jpg", ".svg", ".webp"] 

283 for attachment in associatedAttachments: 

284 for extension in picurestype: 

285 if (attachment.fileName.endswith(extension) and attachment.isDisplayed == True): 

286 image = filepaths[attachment.fileName][0] 

287 if image: 

288 break 

289 

290 

291 if request.method == "POST": # Attempt to save form 

292 eventData = request.form.copy() 

293 try: 

294 savedEvents, validationErrorMessage = attemptSaveEvent(eventData, getFilesFromRequest(request)) 

295 

296 except Exception as e: 

297 print("Error saving event:", e) 

298 savedEvents = False 

299 validationErrorMessage = "Unknown Error Saving Event. Please try again" 

300 

301 

302 if savedEvents: 

303 rsvpCohorts = request.form.getlist("cohorts[]") 

304 updateEventCohorts(savedEvents[0], rsvpCohorts) 

305 flash("Event successfully updated!", "success") 

306 return redirect(url_for("admin.eventDisplay", eventId = event.id)) 

307 else: 

308 flash(validationErrorMessage, 'warning') 

309 

310 # make sure our data is the same regardless of GET and POST 

311 preprocessEventData(eventData) 

312 eventData['program'] = event.program 

313 userHasRSVPed = checkUserRsvp(g.current_user, event) 

314 filepaths = FileHandler(eventId=event.id).retrievePath(associatedAttachments) 

315 isProgramManager = g.current_user.isProgramManagerFor(eventData['program']) 

316 requirements, bonnerCohorts = [], [] 

317 

318 if eventData['program'] and eventData['program'].isBonnerScholars: 

319 requirements = getCertRequirements(Certification.BONNER) 

320 rawBonnerCohorts = getBonnerCohorts(limit=5) 

321 bonnerCohorts = {} 

322 

323 for year, cohort in rawBonnerCohorts.items(): 

324 if cohort: 

325 bonnerCohorts[year] = cohort 

326 invitedCohorts = list(EventCohort.select().where( 

327 EventCohort.event_id == eventId, 

328 )) 

329 invitedYears = [str(cohort.year) for cohort in invitedCohorts] 

330 else: 

331 requirements, bonnerCohorts, invitedYears = [], [], [] 

332 

333 rule = request.url_rule 

334 

335 # Event Edit 

336 if 'edit' in rule.rule: 

337 return render_template("events/createEvent.html", 

338 eventData = eventData, 

339 termList = Term.select().order_by(Term.termOrder), 

340 event = event, 

341 requirements = requirements, 

342 bonnerCohorts = bonnerCohorts, 

343 invitedYears = invitedYears, 

344 userHasRSVPed = userHasRSVPed, 

345 isProgramManager = isProgramManager, 

346 filepaths = filepaths) 

347 # Event View 

348 else: 

349 # get text representations of dates for html 

350 eventData['timeStart'] = event.timeStart.strftime("%-I:%M %p") 

351 eventData['timeEnd'] = event.timeEnd.strftime("%-I:%M %p") 

352 eventData['startDate'] = event.startDate.strftime("%m/%d/%Y") 

353 eventCountdown = getCountdownToEvent(event) 

354 

355 

356 # Identify the next event in a repeating series 

357 if event.seriesId: 

358 eventSeriesList = list(Event.select().where(Event.seriesId == event.seriesId) 

359 .where((Event.isCanceled == False) | (Event.id == event.id)) 

360 .order_by(Event.startDate)) 

361 eventIndex = eventSeriesList.index(event) 

362 if len(eventSeriesList) != (eventIndex + 1): 

363 eventData["nextRepeatingEvent"] = eventSeriesList[eventIndex + 1] 

364 

365 currentEventRsvpAmount = getEventRsvpCount(event.id) 

366 

367 userParticipatedTrainingEvents = getParticipationStatusForTrainings(eventData['program'], [g.current_user], g.current_term) 

368 

369 return render_template("events/eventView.html", 

370 eventData=eventData, 

371 event=event, 

372 userHasRSVPed=userHasRSVPed, 

373 programTrainings=userParticipatedTrainingEvents, 

374 currentEventRsvpAmount=currentEventRsvpAmount, 

375 isProgramManager=isProgramManager, 

376 filepaths=filepaths, 

377 image=image, 

378 pageViewsCount=pageViewsCount, 

379 invitedYears=invitedYears, 

380 eventCountdown=eventCountdown 

381 ) 

382 

383 

384 

385@admin_bp.route('/event/<eventId>/cancel', methods=['POST']) 

386def cancelRoute(eventId): 

387 if g.current_user.isAdmin: 

388 try: 

389 cancelEvent(eventId) 

390 return redirect(request.referrer) 

391 

392 except Exception as e: 

393 print('Error while canceling event:', e) 

394 return "", 500 

395 

396 else: 

397 abort(403) 

398 

399@admin_bp.route('/profile/undo', methods=['GET']) 

400def undoBackgroundCheck(): 

401 try: 

402 username = g.current_user 

403 bgCheckId = session['lastDeletedBgCheck'] 

404 BackgroundCheck.update({BackgroundCheck.deletionDate: None, BackgroundCheck.deletedBy: None}).where(BackgroundCheck.id == bgCheckId).execute() 

405 flash("Background Check has been successfully restored.", "success") 

406 return redirect (f"/profile/{username}?accordion=background") 

407 except Exception as e: 

408 print('Error while undoing background check:', e) 

409 return "", 500 

410 

411@admin_bp.route('/event/undo', methods=['GET']) 

412def undoEvent(): 

413 try: 

414 eventIds = session['lastDeletedEvent'] #list of Ids of the events that got deleted 

415 for eventId in eventIds: 

416 Event.update({Event.deletionDate: None, Event.deletedBy: None}).where(Event.id == eventId).execute() 

417 event = Event.get_or_none(Event.id == eventId) 

418 repeatingEvents = list(Event.select().where((Event.seriesId == event.seriesId) & (Event.isRepeating) & (Event.deletionDate == None)).order_by(Event.id)) 

419 if event.isRepeating: 

420 nameCounter = 1 

421 for repeatingEvent in repeatingEvents: 

422 newEventNameList = repeatingEvent.name.split() 

423 newEventNameList[-1] = f"{nameCounter}" 

424 newEventNameList = " ".join(newEventNameList) 

425 Event.update({Event.name: newEventNameList}).where(Event.id==repeatingEvent.id).execute() 

426 nameCounter += 1 

427 flash("Event has been successfully restored.", "success") 

428 return redirect(url_for("main.events", selectedTerm=g.current_term)) 

429 except Exception as e: 

430 print('Error while canceling event:', e) 

431 return "", 500 

432 

433@admin_bp.route('/event/<eventId>/delete', methods=['POST']) 

434def deleteRoute(eventId): 

435 try: 

436 deleteEvent(eventId) 

437 session['lastDeletedEvent'] = [eventId] 

438 flash("Event successfully deleted.", "success") 

439 return redirect(url_for("main.events", selectedTerm=g.current_term)) 

440 

441 except Exception as e: 

442 print('Error while canceling event:', e) 

443 return "", 500 

444 

445@admin_bp.route('/event/<eventId>/deleteEventAndAllFollowing', methods=['POST']) 

446def deleteEventAndAllFollowingRoute(eventId): 

447 try: 

448 session["lastDeletedEvent"] = deleteEventAndAllFollowing(eventId) 

449 flash("Events successfully deleted.", "success") 

450 return redirect(url_for("main.events", selectedTerm=g.current_term)) 

451 

452 except Exception as e: 

453 print('Error while canceling event:', e) 

454 return "", 500 

455 

456@admin_bp.route('/event/<eventId>/deleteAllEventsInSeries', methods=['POST']) 

457def deleteAllEventsInSeriesRoute(eventId): 

458 try: 

459 session["lastDeletedEvent"] = deleteAllEventsInSeries(eventId) 

460 flash("Events successfully deleted.", "success") 

461 return redirect(url_for("main.events", selectedTerm=g.current_term)) 

462 

463 except Exception as e: 

464 print('Error while canceling event:', e) 

465 return "", 500 

466 

467@admin_bp.route('/makeRepeatingEvents', methods=['POST']) 

468def addRepeatingEvents(): 

469 repeatingEvents = getRepeatingEventsData(preprocessEventData(request.form.copy())) 

470 return json.dumps(repeatingEvents, default=str) 

471 

472 

473@admin_bp.route('/userProfile', methods=['POST']) 

474def userProfile(): 

475 volunteerName= request.form.copy() 

476 if volunteerName['searchStudentsInput']: 

477 username = volunteerName['searchStudentsInput'].strip("()") 

478 user=username.split('(')[-1] 

479 return redirect(url_for('main.viewUsersProfile', username=user)) 

480 else: 

481 flash(f"Please enter the first name or the username of the student you would like to search for.", category='danger') 

482 return redirect(url_for('admin.studentSearchPage')) 

483 

484@admin_bp.route('/search_student', methods=['GET']) 

485def studentSearchPage(): 

486 if g.current_user.isAdmin: 

487 return render_template("/admin/searchStudentPage.html") 

488 abort(403) 

489 

490@admin_bp.route('/activityLogs', methods = ['GET', 'POST']) 

491def activityLogs(): 

492 if g.current_user.isCeltsAdmin: 

493 allLogs = ActivityLog.select(ActivityLog, User).join(User).order_by(ActivityLog.createdOn.desc()) 

494 return render_template("/admin/activityLogs.html", 

495 allLogs = allLogs) 

496 else: 

497 abort(403) 

498 

499@admin_bp.route("/deleteEventFile", methods=["POST"]) 

500def deleteEventFile(): 

501 fileData= request.form 

502 eventfile=FileHandler(eventId=fileData["databaseId"]) 

503 eventfile.deleteFile(fileData["fileId"]) 

504 return "" 

505 

506@admin_bp.route("/uploadCourseParticipant", methods= ["POST"]) 

507def addCourseFile(): 

508 fileData = request.files['addCourseParticipants'] 

509 filePath = os.path.join(app.config["files"]["base_path"], fileData.filename) 

510 fileData.save(filePath) 

511 (session['cpPreview'], session['cpErrors']) = parseUploadedFile(filePath) 

512 os.remove(filePath) 

513 return redirect(url_for("admin.manageServiceLearningCourses")) 

514 

515@admin_bp.route('/manageServiceLearning', methods = ['GET', 'POST']) 

516@admin_bp.route('/manageServiceLearning/<term>', methods = ['GET', 'POST']) 

517def manageServiceLearningCourses(term=None): 

518 

519 """ 

520 The SLC management page for admins 

521 """ 

522 if not g.current_user.isCeltsAdmin: 

523 abort(403) 

524 

525 if request.method == 'POST' and "submitParticipant" in request.form: 

526 saveCourseParticipantsToDatabase(session.pop('cpPreview', {})) 

527 flash('Courses and participants saved successfully!', 'success') 

528 return redirect(url_for('admin.manageServiceLearningCourses')) 

529 

530 manageTerm = Term.get_or_none(Term.id == term) or g.current_term 

531 

532 setRedirectTarget(request.full_path) 

533 # retrieve and store the courseID of the imported course from a session variable if it exists.  

534 # This allows us to export the courseID in the html and use it. 

535 courseID = session.get("alterCourseId") 

536 

537 if courseID: 

538 # delete courseID from the session if it was retrieved, for storage purposes. 

539 session.pop("alterCourseId") 

540 return render_template('/admin/manageServiceLearningFaculty.html', 

541 courseInstructors = getInstructorCourses(), 

542 unapprovedCourses = unapprovedCourses(manageTerm), 

543 approvedCourses = approvedCourses(manageTerm), 

544 importedCourses = getImportedCourses(manageTerm), 

545 terms = selectSurroundingTerms(g.current_term), 

546 term = manageTerm, 

547 cpPreview = session.get('cpPreview', {}), 

548 cpPreviewErrors = session.get('cpErrors', []), 

549 courseID = courseID 

550 ) 

551 

552 return render_template('/admin/manageServiceLearningFaculty.html', 

553 courseInstructors = getInstructorCourses(), 

554 unapprovedCourses = unapprovedCourses(manageTerm), 

555 approvedCourses = approvedCourses(manageTerm), 

556 importedCourses = getImportedCourses(manageTerm), 

557 terms = selectSurroundingTerms(g.current_term), 

558 term = manageTerm, 

559 cpPreview= session.get('cpPreview',{}), 

560 cpPreviewErrors = session.get('cpErrors',[]) 

561 ) 

562 

563@admin_bp.route('/admin/getSidebarInformation', methods=['GET']) 

564def getSidebarInformation() -> str: 

565 """ 

566 Get the count of unapproved courses and students interested in the minor for the current term  

567 to display in the admin sidebar. It must be returned as a string to be received by the 

568 ajax request. 

569 """ 

570 unapprovedCoursesCount: int = len(unapprovedCourses(g.current_term)) 

571 interestedStudentsCount: int = len(getMinorInterest()) 

572 return {"unapprovedCoursesCount": unapprovedCoursesCount, 

573 "interestedStudentsCount": interestedStudentsCount} 

574 

575@admin_bp.route("/deleteUploadedFile", methods= ["POST"]) 

576def removeFromSession(): 

577 try: 

578 session.pop('cpPreview') 

579 except KeyError: 

580 pass 

581 

582 return "" 

583 

584@admin_bp.route('/manageServiceLearning/imported/<courseID>', methods = ['POST', 'GET']) 

585def alterImportedCourse(courseID): 

586 """ 

587 This route handles a GET and a POST request for the purpose of imported courses.  

588 The GET request provides preexisting information of an imported course in a modal.  

589 The POST request updates a specific imported course (course name, course abbreviation,  

590 hours earned on completion, list of instructors) in the database with new information  

591 coming from the imported courses modal.  

592 """ 

593 if request.method == 'GET': 

594 try: 

595 targetCourse = Course.get_by_id(courseID) 

596 targetInstructors = CourseInstructor.select().where(CourseInstructor.course == targetCourse) 

597 

598 try: 

599 serviceHours = list(CourseParticipant.select().where(CourseParticipant.course_id == targetCourse.id))[0].hoursEarned 

600 except IndexError: # If a course has no participant, IndexError will be raised 

601 serviceHours = 20 

602 

603 courseData = model_to_dict(targetCourse, recurse=False) 

604 courseData['instructors'] = [model_to_dict(instructor.user) for instructor in targetInstructors] 

605 courseData['hoursEarned'] = serviceHours 

606 

607 return jsonify(courseData) 

608 

609 except DoesNotExist: 

610 flash("Course not found") 

611 return jsonify({"error": "Course not found"}), 404 

612 

613 if request.method == 'POST': 

614 # Update course information in the database 

615 courseData = request.form.copy() 

616 editImportedCourses(courseData) 

617 session['alterCourseId'] = courseID 

618 

619 return redirect(url_for("admin.manageServiceLearningCourses", term=courseData['termId'])) 

620 

621 

622@admin_bp.route("/manageBonner") 

623def manageBonner(): 

624 if not g.current_user.isCeltsAdmin: 

625 abort(403) 

626 

627 return render_template("/admin/bonnerManagement.html", 

628 cohorts=getBonnerCohorts(), 

629 events=getBonnerEvents(g.current_term), 

630 requirements=getCertRequirements(certification=Certification.BONNER)) 

631 

632@admin_bp.route("/bonner/<year>/<method>/<username>", methods=["POST"]) 

633def updatecohort(year, method, username): 

634 if not g.current_user.isCeltsAdmin: 

635 abort(403) 

636 

637 try: 

638 user = User.get_by_id(username) 

639 except: 

640 abort(500) 

641 

642 if method == "add": 

643 try: 

644 BonnerCohort.create(year=year, user=user) 

645 flash(f"Successfully added {user.fullName} to {year} Bonner Cohort.", "success") 

646 except IntegrityError as e: 

647 # if they already exist, ignore the error 

648 flash(f'Error: {user.fullName} already added.', "danger") 

649 pass 

650 

651 elif method == "remove": 

652 BonnerCohort.delete().where(BonnerCohort.user == user, BonnerCohort.year == year).execute() 

653 flash(f"Successfully removed {user.fullName} from {year} Bonner Cohort.", "success") 

654 else: 

655 flash(f"Error: {user.fullName} can't be added.", "danger") 

656 abort(500) 

657 return "" 

658 

659@admin_bp.route("/bonnerXls/<startingYear>/<noOfYears>") 

660def getBonnerXls(startingYear, noOfYears): 

661 if not g.current_user.isCeltsAdmin: 

662 abort(403) 

663 newfile = makeBonnerXls(startingYear, noOfYears) 

664 return send_file(open(newfile, 'rb'), download_name='BonnerStudents.xlsx', as_attachment=True) 

665 

666 

667@admin_bp.route("/saveRequirements/<certid>", methods=["POST"]) 

668def saveRequirements(certid): 

669 if not g.current_user.isCeltsAdmin: 

670 abort(403) 

671 

672 newRequirements = updateCertRequirements(certid, request.get_json()) 

673 

674 return jsonify([requirement.id for requirement in newRequirements]) 

675 

676 

677@admin_bp.route("/displayEventFile", methods=["POST"]) 

678def displayEventFile(): 

679 fileData = request.form 

680 eventfile = FileHandler(eventId=fileData["id"]) 

681 isChecked = fileData.get('checked') == 'true' 

682 eventfile.changeDisplay(fileData['id'], isChecked) 

683 return ""