]i dZddlZddlZddlmZddlmZmZddlm Z ddl m Z ddl m Z ddlmZdd lmZmZmZdd lmZmZdd ed efd Zd de dededefdZde deded efdZde ded efdZde dededed ef dZde deded efdZde deded dfdZde dedededed e f dZ de dededed df dZ!de ded e"e fdZ#y)!uNUser service — business logic for user management and SPBU role assignments.N)select)IntegrityErrorSQLAlchemyError) AsyncSession) hash_password)UserSpbuAssignment)User)role_repositoryspbu_repositoryuser_repository) UserCreate UserUpdatelengthreturnctjtjzdjfdt |DS)Nc3HK|]}tjyw)N)secretschoice).0_alphabets ;/var/www/html/spbu.com/backend/app/services/user_service.py z#_random_password..sC]7>>(+]s")string ascii_lettersdigitsjoinrange)rrs @r_random_passwordr s0##fmm3H 77CU6]C CCdbactorskiplimitcK|jrtj|||d{S|jt t j jt j|jk(d{}|jDcgc]}|d }}|sgdfStj||||d{S77Lcc}w7 w)zZSuperadmin sees all users. SPBU Admin sees only users in their own SPBUs (no superadmins).Nr) is_superadminr get_allexecuterrspbu_idwhereuser_ididallget_all_scoped)r"r#r$r%resultrowactor_spbu_idss r list_usersr3s $,,Ru===::!))*001C1K1Kuxx1WXF)/ 5 c!f N5 1u  //ND%P PP>6 Qs@'CCACCC C&#C C CCCdatac K|js tdtj||jd{}|r t d|j r5tj||j d{}|r t d|jr |jn t} tj||j|j|j xsdt||jd{}|jd{|S777"7 #t$r%|jd{7t dt $r|jd{7wxYww)uQCreate a new user. Password is optional — a random one is generated if omitted.z2Hanya Super Admin yang dapat membuat akun penggunaNzEmail sudah terdaftarzUsername sudah digunakan)nameemailusername password_hashr'Data konflik atau sudah ada)r'PermissionErrorr get_by_emailr7 ValueErrorr8get_by_usernamepasswordr creater6rcommitrrollbackr)r"r4r#existingexisting_usernamer?r0s r create_userrE#sB   RSS$11"djjAAH011 }}"1"A"A"dmm"TT 78 8 $ t}}3C3EH&-- **]]*d'1,,   iik %BU    8kkm677 kkm sw;FD%AF>D'?3F3AD-D)D-D+D-$F'F)D-+D--E= E  +E=5E86E==Fr,chKtj||d{}|s td|S7w)z4Fetch a user by ID, raising ValueError if not found.NzUser tidak ditemukan)r get_by_idr=)r"r,users rget_userrIBs4 **2w7 7D /00 K 8s 202cK|js tdt||d{}|jd}d|vrt |j d|d< t j||fi|d{}|jd{|S7q7 7 #t$r%|jd{7tdt$r|jd{7wxYww)zHUpdate scalar fields on a user. Only superadmins can edit user profiles.z3Hanya Super Admin yang dapat mengubah akun penggunaNT) exclude_noner?r9r:) r'r;rI model_dumprpopr updaterArrBr=r)r"r,r4r#rH update_datar0s r update_userrPJs   STT"g& &D//t/4K[ '4[__Z5P'Q O$ &--b$F+FFiik  ' G 8kkm677 kkm sc'C4B7C4"B!<B=B!BB!C4B!B!!C1=C>+C1)C,*C11C4cK|js tdt||d{}|j|jk(r t d|jr|js td t j ||dd{}|jd{|S77 7 #t$r|jd{7wxYww)zQDeactivate a user account. Non-superadmins cannot deactivate superadmin accounts.z8Hanya Super Admin yang dapat menonaktifkan akun penggunaNz%Tidak bisa menonaktifkan akun sendiriz)Tidak bisa menonaktifkan akun Super AdminF) is_active) r'r;rIr-r=r rNrArrB)r"r,r#rHr0s rdeactivate_userrS^s   XYY"g& &D ww%((@AA %"5"5IJJ&--b$%HHiik  ' I kkm sX'CB0A C6B6B2B6)B4*B6/C2B64B66CCCCcK|js tdt||d{}|j|jk(r t d t j ||dd{|jd{y7b77 #t$r%|jd{7t dt$r|jd{7wxYww)zDelete a user. Hard delete in dev mode, soft delete in production. Only superadmins can delete users. Cannot delete yourself.z4Hanya Super Admin yang dapat menghapus akun penggunaNz!Tidak bisa menghapus akun sendiriF)hardz2Tidak dapat menghapus user: masih ada data terkait) r'r;rIr-r=r delete_userrArrBr)r"r,r#rHs rrVrVps   TUU"g& &D ww%((<==))"d???iik ' @ OkkmMNN kkm sc'C%B (C%B.B/BBB C%BBC".B1/+C"CC""C%r*role_idc"Kt||d{tj||d{}|s td|js2|j Dchc]}|j }}||vr tdtj||d{}|s tdtj|||d{} | r!tj|| |d{} n tj||||d{} |jd{| S77cc}w77n7M7.7#t$r%|jd{7tdt $r|jd{7wxYww)zAssign a user to an SPBU with a given role. Updates the role if an assignment already exists. Non-superadmins can only assign to SPBUs they themselves belong to.NzSPBU tidak ditemukanTidak punya akses ke SPBU inizRole tidak ditemukan)rWr:)rIr rGr=r' assignmentsr*r;r r get_assignmentupdate_assignmentcreate_assignmentrArrBr) r"r,r*rWr#spbuar2rolerCr0s rassign_to_spburaso 2w  **2w7 7D /00   -2->->?->!))->? . (!"AB B **2w7 7D /00$33BIIH  *<rwsT :/+. NN3DSD#D Q Qd Q# Q# Q,j$>|cd,JtX\(lS$$,Td&"-0;>GK@"-09= ,>>"> >r!