Added a settings change view for users in the frontend

src/pretix/base/forms/__init__.py

@@ -38,10 +38,10 @@ class VersionedBaseModelForm(BaseI18nModelForm):
                 clone = old.clone()
                 for f in type(self.instance)._meta.get_fields():
                     if f.name not in (
-                        'id', 'identity', 'version_start_date', 'version_end_date',
-                        'version_birth_date'
+                            'id', 'identity', 'version_start_date', 'version_end_date',
+                            'version_birth_date'
                     ) and not isinstance(f, (
-                        models.ManyToOneRel, models.ManyToManyRel, models.ManyToManyField
+                            models.ManyToOneRel, models.ManyToManyRel, models.ManyToManyField
                     )):
                         setattr(clone, f.name, getattr(new, f.name))
                 self.instance = clone

src/pretix/base/forms/user.py

@@ -0,0 +1,94 @@
+from django import forms
+from django.contrib.auth.hashers import check_password
+from django.db.models import Q
+from django.utils.translation import ugettext_lazy as _
+from pytz import common_timezones
+
+from pretix.base.models import User
+
+
+class UserSettingsForm(forms.ModelForm):
+    error_messages = {
+        'duplicate_identifier': _("There already is an account associated with this e-mail address. "
+                                  "Please choose a different one."),
+        'pw_current': _("Please enter your current password if you want to change your e-mail "
+                        "address or password."),
+        'pw_current_wrong': _("The current password you entered was not correct."),
+        'pw_mismatch': _("Please enter the same password twice"),
+    }
+
+    old_pw = forms.CharField(max_length=255,
+                             required=False,
+                             label=_("Your current password"),
+                             widget=forms.PasswordInput())
+    new_pw = forms.CharField(max_length=255,
+                             required=False,
+                             label=_("New password"),
+                             widget=forms.PasswordInput())
+    new_pw_repeat = forms.CharField(max_length=255,
+                                    required=False,
+                                    label=_("Repeat new password"),
+                                    widget=forms.PasswordInput())
+    # timezone = forms.ChoiceField(
+    #     choices=((a, a) for a in common_timezones),
+    #     label=_("Default timezone"),
+    # )
+
+    class Meta:
+        model = User
+        fields = [
+            'givenname',
+            'familyname',
+            'locale',
+            # 'timezone',
+            'email'
+        ]
+
+    def __init__(self, *args, **kwargs):
+        self.user = kwargs.pop('user')
+        super().__init__(*args, **kwargs)
+
+    def clean_old_pw(self):
+        old_pw = self.cleaned_data.get('old_pw')
+        if old_pw and not check_password(old_pw, self.user.password):
+            raise forms.ValidationError(
+                self.error_messages['pw_current_wrong'],
+                code='pw_current_wrong',
+            )
+
+        return old_pw
+
+    def clean_email(self):
+        email = self.cleaned_data['email']
+        if User.objects.filter(Q(identifier=email) & ~Q(pk=self.instance.pk)).exists():
+            raise forms.ValidationError(
+                self.error_messages['duplicate_identifier'],
+                code='duplicate_identifier',
+            )
+        return email
+
+    def clean_new_pw_repeat(self):
+        password1 = self.cleaned_data.get('new_pw')
+        password2 = self.cleaned_data.get('new_pw_repeat')
+        if password1 and password1 != password2:
+            raise forms.ValidationError(
+                self.error_messages['pw_mismatch'],
+                code='pw_mismatch'
+            )
+
+    def clean(self):
+        password1 = self.cleaned_data.get('new_pw')
+        email = self.cleaned_data.get('email')
+        old_pw = self.cleaned_data.get('old_pw')
+
+        if (password1 or email != self.user.email) and not old_pw:
+            raise forms.ValidationError(
+                self.error_messages['pw_current'],
+                code='pw_current'
+            )
+
+        if password1:
+            self.instance.set_password(password1)
+        self.instance.identifier = email
+
+        return self.cleaned_data