From c8d5ae4015d561526542d851e2739a9b9ad1432c Mon Sep 17 00:00:00 2001
From: 0livd <0livd@users.noreply.github.com>
Date: Thu, 4 May 2017 18:10:15 +0200
Subject: [PATCH] Introduce PUBLIC_PROJECT_CREATION setting

When set to False (True by default), this setting will
deactivate the demo project and ask for ADMIN_PASS for
project creation
Closes #108
---
 budget/default_settings.py |  2 ++
 budget/templates/home.html |  6 ++++++
 budget/web.py              | 21 +++++++++++++++++----
 3 files changed, 25 insertions(+), 4 deletions(-)

diff --git a/budget/default_settings.py b/budget/default_settings.py
index 3f377099..63878477 100644
--- a/budget/default_settings.py
+++ b/budget/default_settings.py
@@ -10,3 +10,5 @@ SECRET_KEY = "tralala"
 MAIL_DEFAULT_SENDER = ("Budget manager", "budget@notmyidea.org")
 
 ADMIN_PASS = ""
+
+PUBLIC_PROJECT_CREATION = True
diff --git a/budget/templates/home.html b/budget/templates/home.html
index 399343a5..7caa6af5 100644
--- a/budget/templates/home.html
+++ b/budget/templates/home.html
@@ -5,7 +5,9 @@
     <header id="header" class="row">
       <div class="col-5  offset-md-2">
             <h2>{{ _("Manage your shared <br>expenses, easily") }}</h2>
+            {% if public_project_creation %}
             <a href="{{ url_for(".demo") }}" class="tryout btn">{{ _("Try out the demo")  }}</a>
+            {% endif %}
         </div>
         <div class="col-4">
             <p class="additional-content">{{ _("You're sharing a house?") }}<br /> {{ _("Going on holidays with friends?") }}<br /> {{ _("Simply sharing money with others?") }} <br /><strong>{{ _("We can help!") }}</strong></p>
@@ -26,6 +28,7 @@
             </form>
         </div>
         <div class="col-3 offset-md-1">
+            {% if public_project_creation %}
             <form id="creation-form" class="form-horizontal" action="{{ url_for(".create_project") }}" method="post">
                 <fieldset class="form-group">
                     <legend>...{{ _("or create a new one") }}</legend>
@@ -35,6 +38,9 @@
                     <button class="btn" type="submit">{{ _("let's get started") }}</button>
                 </div>
             </form>
+            {% else %}
+            <a href="{{ url_for(".create_project") }}">...{{ _("or create a new one") }}</a>
+            {% endif %}
         </main>
     </div>
 {% endblock %}
diff --git a/budget/web.py b/budget/web.py
index b0259174..72513d8a 100644
--- a/budget/web.py
+++ b/budget/web.py
@@ -150,13 +150,20 @@ def authenticate(project_id=None):
 
 @main.route("/")
 def home():
-    project_form = ProjectForm()
     auth_form = AuthenticationForm()
-    return render_template("home.html", project_form=project_form,
-            auth_form=auth_form, session=session)
+    public_project_creation = current_app.config['PUBLIC_PROJECT_CREATION']
+    if public_project_creation:
+        project_form = ProjectForm()
+        return render_template("home.html", project_form=project_form,
+                               public_project_creation=public_project_creation,
+                               auth_form=auth_form, session=session)
+    # If public_project_creation is False we don't need to pass a project form to home
+    return render_template("home.html", public_project_creation=public_project_creation,
+                           auth_form=auth_form, session=session)
 
 
 @main.route("/create", methods=["GET", "POST"])
+@require_admin
 def create_project():
     form = ProjectForm()
     if request.method == "GET" and 'project_id' in request.values:
@@ -290,8 +297,14 @@ def demo():
 
     Create a demo project if it doesnt exists yet (or has been deleted)
     """
+    public_project_creation = current_app.config['PUBLIC_PROJECT_CREATION']
     project = Project.query.get("demo")
-    if not project:
+
+    # Demo project is not automatically created if public project creation is disabled
+    if not project and not public_project_creation:
+        raise Redirect303(url_for(".create_project",
+                                  project_id='demo'))
+    if not project and public_project_creation:
         project = Project(id="demo", name=u"demonstration", password="demo",
                 contact_email="demo@notmyidea.org")
         db.session.add(project)