User level for accessing different areas

main.py

@@ -27,7 +27,7 @@ OAUTH_CLIENT_SECRET = os.environ.get('OAUTH_CLIENT_SECRET')
 OPENID_PROVIDER_URL = os.environ.get("OPENID_PROVIDER_URL", "https://huggingface.co")
 SPACE_HOST = os.environ.get('SPACE_HOST')
 HF_DATASET_AUTH_TOKEN = os.environ.get('HF_DATASET_AUTH_TOKEN', "(none)")
-
+DEFAULT_ANONYMOUS_USER_LEVEL = os.environ.get('DEFAULT_ANONYMOUS_USER_LEVEL', 0)
 
 LOCAL_STORAGE_PATH = ""
 
@@ -238,7 +238,7 @@ def html_create_feedback_updown_button(qe_id, ans_id, selected=0, disabled=False
     return button_row
 
 
-def html_augment_signle_evaluation_text_with_feedback(eval_html, qe_obj, ans_id):
+def html_augment_signle_evaluation_text_with_feedback(eval_html, qe_obj, ans_id, show_feedback_buttons=False):
     """
     Will plot the + / - buttons for feedback.
 
@@ -248,8 +248,12 @@ def html_augment_signle_evaluation_text_with_feedback(eval_html, qe_obj, ans_id)
     :return:
     """
     answer_eval_js = json.loads(qe_obj.answer_eval_text)
-    buttons = html_create_feedback_updown_button(qe_obj.id, ans_id, answer_eval_js[ans_id]["EVAL"],
+    if show_feedback_buttons:
+        buttons = html_create_feedback_updown_button(qe_obj.id, ans_id, answer_eval_js[ans_id]["EVAL"],
                                                  disabled=(qe_obj.submitted == 1))
+    else:
+        buttons = Div("")
+
     final_div = Div(eval_html, buttons,
                     style=" background-color: #f0f0f0; display: flex; "
                           "width: 98%; margin: 16px; padding: 3px; align-items: center;", cls="row")
@@ -317,6 +321,10 @@ def post(session, qe_id:int, freeform_feedback:str):
         print("submit_feedback made session/object error")
         return "Error"
 
+    ulevel = get_user_level(session)
+    if ulevel < 2:
+        return P("Unauthorized. Log in to submit feedback.")
+
     # Update the object
     session_id = session.get("session_id", "Not set")
     save_to_storage(
@@ -339,12 +347,12 @@ def post(session, qe_id:int, freeform_feedback:str):
                                    feedback_userdata=user_data)
     )
 
-    return tl_html_results_and_feedback_area(session_id) #html_render_answer_from_db(session_id, html_id=HTML_RESULTS_AREA) #html_get_textual_feedback_form(qe_obj, thank=True), html_format_code_review_form(qe_obj, HTML_RESULTS_AREA)
+    return tl_html_results_and_feedback_area(session)
 
 
 #######  EVALUATE CODE
 
-def html_format_code_review_form(qe_obj):
+def html_format_code_review_form(qe_obj, show_feedback_buttons):
     """
     Formats the code review, adding fields for feedback if it is required.
 
@@ -365,11 +373,14 @@ def html_format_code_review_form(qe_obj):
         for k, eval_line in enumerate(enhanced_answer):
             if caug_code == eval_line["criteria"]:
                 eval_txt = Div(P(eval_line["explanation"]), style="flex: 1; margin-right: 10px;", cls="box col-xs-11")
-                eval_txt_fb = html_augment_signle_evaluation_text_with_feedback(eval_txt, qe_obj, k)
+                eval_txt_fb = html_augment_signle_evaluation_text_with_feedback(eval_txt, qe_obj, k, show_feedback_buttons)
                 eval_txt_fb_list.append(eval_txt_fb)
         criteria_div = Div(*crit_tag, *eval_txt_fb_list, style="border: 1px solid black; margin: 10px; padding: 10px")
         list_of_citerias.append(criteria_div)
-    textual_feedback = html_get_textual_feedback_form(qe_obj)
+    if show_feedback_buttons:
+        textual_feedback = html_get_textual_feedback_form(qe_obj)
+    else:
+        textual_feedback = P("Log in to leave some feedback about this evaluation")
     return html_render_code_output(c_code), *list_of_citerias, textual_feedback
 
 
@@ -412,7 +423,7 @@ def get(session):
     """
     if 'session_id' not in session: return "render_answer No session ID"
     session_id = session["session_id"]
-    answer_area = tl_html_results_and_feedback_area(session_id)
+    answer_area = tl_html_results_and_feedback_area(session)
     return answer_area
 
 
@@ -436,8 +447,14 @@ def html_render_code_output(code):
     return txtarea
 
 
-def html_render_answer_from_db(session_id, show_submit_form=True):
+def html_render_answer_from_db(session, show_submit_form=True):
+    session_id = session["session_id"]
     eval_request_status, state_obj = get_latest_eval_request_status(session_id)
+    ulevel = get_user_level(session)
+    if ulevel >= 2:
+        show_feedback_buttons = True
+    else:
+        show_feedback_buttons = False
     # state_rows = session_state_table(limit=1, where=f"session_id == '{session_id}'", order_by="id DESC")
     # print(eval_request_status, state_obj)
     if eval_request_status == EVAL_STATE_NEW:
@@ -448,9 +465,9 @@ def html_render_answer_from_db(session_id, show_submit_form=True):
             print(f"Object id {state_obj.current_qeval} can't be found in question_evaluation_table")
             return (None,)
         qe_obj = qe_obj_lst[0]
-        return (html_format_code_review_form(qe_obj),
-                html_render_inputbox(target_html_id=HTML_RESULTS_AREA,
-                                     region_html_id=HTML_SUBMIT_CODE_AREA) if show_submit_form else None)
+        return (html_format_code_review_form(qe_obj, show_feedback_buttons),
+                tl_html_render_inputbox(session, target_html_id=HTML_RESULTS_AREA,
+                                        region_html_id=HTML_SUBMIT_CODE_AREA) if show_submit_form else None)
     if eval_request_status == EVAL_STATE_TIMEDOUT:
         return html_eval_request_timed_out(),
     if eval_request_status == EVAL_STATE_QUERY:
@@ -518,28 +535,59 @@ def call_gpt_and_store_result(session_obj_id, code_to_check):
         traceback.print_exc()
 
 
-def tl_html_results_and_feedback_area(session_id, show_submit_form=True):
+def tl_html_results_and_feedback_area(session, show_submit_form=True):
     """
     Top level component that will render the code evaluation overlapped with feedback submission form.
 
     :param session_id:
     :return:
     """
-    results_feedback_area = html_render_answer_from_db(session_id, show_submit_form)
+    results_feedback_area = html_render_answer_from_db(session, show_submit_form)
     return Div(*results_feedback_area, id=HTML_RESULTS_AREA)
 
 
+
 ########  CODE INPUT FORM
 
 
-def html_render_inputbox(target_html_id, region_html_id):
+def tl_html_render_inputbox(session, target_html_id, region_html_id):
     txtarea = Textarea(id="ccodetoeval", name="ccodetoeval", placeholder="Enter a piece of C code", rows=3)
     form = Form(Group(txtarea, Button("Evaluate")),
                 hx_post="/submit_to_eval",
                 hx_swap="outerHTML",
                 target_id=f"{target_html_id}"
                 )
-    return Div(form, id=region_html_id, hx_swap_oob='true')
+
+    ulevel = get_user_level(session)
+    if ulevel < 1:
+        form = P("Log in to submit code to review.", style="background-color: #fff0f0;")
+    out_div = Div(form, id=region_html_id, hx_swap_oob='true')
+    return out_div
+
+
+@rt("/submit_to_eval", methods="post")
+def post(session, ccodetoeval:str):
+    # print(session)
+    ulevel = get_user_level(session)
+    if ulevel < 1:
+        return P("Unauthorized. Log in to submit code to review.", style="background-color: #fff0f0;")
+    if 'session_id' not in session:
+        return P("submit_to_eval. Bad call. No session ID")
+    session_id = session["session_id"]
+    session_obj = Session_State_cls(
+        session_id=session_id,
+        state=EVAL_STATE_QUERY,
+        submitted_date=datetime.isoformat(datetime.utcnow()),
+    )
+    save_to_storage(
+        storage.NavigationEvent(event_type="/submit_to_eval", event_session_id=session_id, event_params={"ccodetoeval":ccodetoeval})
+    )
+
+    # we insert and we get the new primary key
+    session_obj = session_state_table.insert(session_obj)
+    # will be executed in another thread with magic @threaded
+    call_gpt_and_store_result(session_obj.id, ccodetoeval)
+    return tl_html_results_and_feedback_area(session), render_clear_area(session_id, HTML_CLEAR_FORM)
 
 
 
@@ -565,6 +613,29 @@ def render_clear_area(session_id, html_id):
         return Div(P(""), id=html_id, hx_swap_oob='true')
 
 
+@rt("/clear_area", methods="get")
+def get(session):
+    if 'session_id' not in session: return P("clear_area. Bad call. No session ID")
+    session_id = session["session_id"]
+
+    save_to_storage(
+        storage.NavigationEvent(event_type="/clear_area", event_session_id=session_id)
+    )
+
+    # insert a row to "cancel"/reset the current request
+    session_obj = Session_State_cls(
+        session_id=session_id,
+        state=EVAL_STATE_NEW,
+        submitted_date=datetime.isoformat(datetime.utcnow()),
+    )
+    session_state_table.insert(session_obj)
+    # re-issue the page, basically.
+    input_area = tl_html_render_inputbox(session, target_html_id=HTML_RESULTS_AREA, region_html_id=HTML_SUBMIT_CODE_AREA)
+    results_area = tl_html_results_and_feedback_area(session)
+    clear_area = render_clear_area(session_id, HTML_CLEAR_FORM)
+    return results_area, input_area, clear_area
+
+
 ########## AUTHENTICATION
 
 def html_render_login_to_get_access_part(session):
@@ -756,6 +827,24 @@ def get(session):
     session["user_data"] = None
     return RedirectResponse(url="/")
 
+
+def get_user_level(session):
+    """
+    Gets the user rights level. Basically 0 for not logged in, 2 for logged in.
+    The DEFAULT_ANONYMOUS_USER_LEVEL can raise this level (max operation)
+
+    :param session:
+    :return:
+    """
+    ulevel = 0
+    if session[USER_DATA_SESSION_NAME] is not None:
+        ulevel = 2
+    ulevel = max(ulevel, DEFAULT_ANONYMOUS_USER_LEVEL)
+
+    return ulevel
+
+
+
 ########## MAIN PAGE
 
 
@@ -784,55 +873,13 @@ def get(session):
         P("!! The data will be saved and maybe made public !!"),
     ]
 
-    input_area = html_render_inputbox(target_html_id=HTML_RESULTS_AREA, region_html_id=HTML_SUBMIT_CODE_AREA)
-    results_feedback_area = tl_html_results_and_feedback_area(session_id, show_submit_form=False)
+    input_area = tl_html_render_inputbox(session, target_html_id=HTML_RESULTS_AREA, region_html_id=HTML_SUBMIT_CODE_AREA)
+    results_feedback_area = tl_html_results_and_feedback_area(session, show_submit_form=False)
     clear_area = render_clear_area(session_id, HTML_CLEAR_FORM)
     # print(session)
     return title, Main( *preamble, input_area, results_feedback_area, clear_area)
 
 
-@rt("/submit_to_eval", methods="post")
-def post(session, ccodetoeval:str):
-    # print(session)
-    if 'session_id' not in session:
-        return P("submit_to_eval. Bad call. No session ID")
-    session_id = session["session_id"]
-    session_obj = Session_State_cls(
-        session_id=session_id,
-        state=EVAL_STATE_QUERY,
-        submitted_date=datetime.isoformat(datetime.utcnow()),
-    )
-    save_to_storage(
-        storage.NavigationEvent(event_type="/submit_to_eval", event_session_id=session_id, event_params={"ccodetoeval":ccodetoeval})
-    )
-
-    # we insert and we get the new primary key
-    session_obj = session_state_table.insert(session_obj)
-    # will be executed in another thread with magic @threaded
-    call_gpt_and_store_result(session_obj.id, ccodetoeval)
-    return tl_html_results_and_feedback_area(session_id), render_clear_area(session_id, HTML_CLEAR_FORM)
-
 
-@rt("/clear_area", methods="get")
-def get(session):
-    if 'session_id' not in session: return P("clear_area. Bad call. No session ID")
-    session_id = session["session_id"]
-
-    save_to_storage(
-        storage.NavigationEvent(event_type="/clear_area", event_session_id=session_id)
-    )
-
-    # insert a row to "cancel"/reset the current request
-    session_obj = Session_State_cls(
-        session_id=session_id,
-        state=EVAL_STATE_NEW,
-        submitted_date=datetime.isoformat(datetime.utcnow()),
-    )
-    session_state_table.insert(session_obj)
-    # re-issue the page, basically.
-    input_area = html_render_inputbox(target_html_id=HTML_RESULTS_AREA, region_html_id=HTML_SUBMIT_CODE_AREA)
-    results_area = tl_html_results_and_feedback_area(session_id)
-    clear_area = render_clear_area(session_id, HTML_CLEAR_FORM)
-    return results_area, input_area, clear_area
 
 serve()