re2o/users/management/commands/anonymize.py

from django.core.management.base import BaseCommand
from users.models import User, School, Adherent, Club
from machines.models import Domain, Machine
from reversion.models import Revision
from django.db.models import F, Value
from django.db.models import Q
from django.db.models.functions import Concat

from re2o.login import hashNT, makeSecret

import os, random, string
from random import randint

class Command(BaseCommand):
    help="Anonymize the data in the database in order to use them on critical servers (dev, personnal...). Every information will be overwritten using non-personnal informations. This script must follow any modification of the database.\nOptionnal argument: {id|id|id|...} to exclude users from anonymisation"

    def add_arguments(self, parser):
        parser.add_argument('user_id', nargs='+', type=int, help='User ID')

    def handle(self, *args, **kwargs):
        users_ids = kwargs['user_id']
        for user_id in users_ids:
            self.stdout.write("User: {} will not be anonymised".format(User.objects.filter(id=user_id).get().name))
            
        self.stdout.write(self.style.WARNING('\nDISCLAIMER\nThis function will make your database unusable for production. Are you sure you want to run this ?(doit): '))
        if(input()=="doit"):

            total = Adherent.objects.count()
            self.stdout.write("Starting anonymizing the {} users data.".format(total))
            
            u = User.objects.filter(~Q(id__in=users_ids))
            a = Adherent.objects.filter(~Q(id__in=users_ids))
            c = Club.objects.filter(~Q(id__in=users_ids))
            d = Domain.objects.all()
            m = Machine.objects.filter(~Q(user_id__in=users_ids))

            self.stdout.write('Supression de l\'école...')
            # Create a fake School to put everyone in it.
            ecole = School(name="Ecole des Ninja")
            ecole.save()
            u.update(school=ecole)
            self.stdout.write(self.style.SUCCESS('done ...'))

            self.stdout.write('Supression des chambres...')
            a.update(room=None)
            c.update(room=None)
            self.stdout.write(self.style.SUCCESS('done ...'))

            self.stdout.write('Supression des mails...')
            u.update(email='example@example.org', 
                    local_email_redirect = False, 
                    local_email_enabled=False)
            self.stdout.write(self.style.SUCCESS('done ...'))

            self.stdout.write('Supression des noms, prenoms, pseudo, telephone, commentaire...')
            a.update(name=Concat(Value('name of '), 'id'))
            self.stdout.write(self.style.SUCCESS('done name'))

            a.update(surname=Concat(Value('surname of '), 'id'))
            self.stdout.write(self.style.SUCCESS('done surname'))

            u.update(pseudo=F('id'))
            self.stdout.write(self.style.SUCCESS('done pseudo'))

            a.update(telephone=Concat(Value('phone of '), 'id'))
            self.stdout.write(self.style.SUCCESS('done phone'))

            a.update(comment=Concat(Value('commentaire of '), 'id'))
            self.stdout.write(self.style.SUCCESS('done ...'))
            
            self.stdout.write('Renommage des machines...')
            m.update(name=Concat(Value('Machine '),F('id'),Value(' of '),F('user_id')))
            d.update(name=Concat(Value('Domaine id '),F('id')))
            self.stdout.write(self.style.SUCCESS('done ...'))

            self.stdout.write('Unification du mot de passe...')
            # Define the password
            chars = string.ascii_letters + string.digits + '!@#$%^&*()'
            taille = 20
            random.seed = (os.urandom(1024))
            password = ""
            for i in range(taille):
                password+=random.choice(chars)

            self.stdout.write(self.style.HTTP_NOT_MODIFIED('The password will be: {}'.format(password)))

            u.update(pwd_ntlm = hashNT(password))
            u.update(password = makeSecret(password))
            self.stdout.write(self.style.SUCCESS('done...'))

            self.stdout.write('Suppression de l\'historique (This may take some time)')
            Revision.objects.all().delete()
            self.stdout.write(self.style.SUCCESS('done...'))

            self.stdout.write("Data anonymized!")

        else:
                self.stdout.write("Anonymisation aborted")