# Copyright (c) 2007 - 2021, Pascal Volk
# See COPYING for distribution information.
"""
   VirtualMailManager.handler
   ~~~~~~~~~~~~~~~~~~~~~~~~~~

   A wrapper class. It wraps round all other classes and does some
   dependencies checks.

   Additionally it communicates with the PostgreSQL database, creates
   or deletes directories of domains or users.
"""

import os
import re

from shutil import rmtree
from stat import S_IRGRP, S_IROTH, S_IWGRP, S_IWOTH
from subprocess import Popen, PIPE

import psycopg2

from VirtualMailManager.account import Account
from VirtualMailManager.alias import Alias
from VirtualMailManager.aliasdomain import AliasDomain
from VirtualMailManager.catchall import CatchallAlias
from VirtualMailManager.common import exec_ok, lisdir
from VirtualMailManager.config import Config as Cfg
from VirtualMailManager.constants import MIN_GID, MIN_UID, \
     ACCOUNT_EXISTS, ACTION_ENABLE, ACTION_DISABLE, ACTION_RESET, \
     ALIAS_EXISTS, CONF_NOFILE, CONF_NOPERM, CONF_WRONGPERM, \
     DATABASE_ERROR, DOMAINDIR_GROUP_MISMATCH, DOMAIN_INVALID, \
     FOUND_DOTS_IN_PATH, INVALID_ACTION, INVALID_ARGUMENT, \
     MAILDIR_PERM_MISMATCH, NOT_EXECUTABLE, NO_SUCH_ACCOUNT, \
     NO_SUCH_ALIAS, NO_SUCH_BINARY, NO_SUCH_DIRECTORY, NO_SUCH_RELOCATED, \
     RELOCATED_EXISTS, UNKNOWN_SERVICE, VMM_ERROR, LOCALPART_INVALID, \
     TYPE_ACCOUNT, TYPE_ALIAS, TYPE_RELOCATED
from VirtualMailManager.domain import Domain
from VirtualMailManager.emailaddress import DestinationEmailAddress, \
     EmailAddress, RE_LOCALPART
from VirtualMailManager.errors import \
     DomainError, NotRootError, PermissionError, VMMError
from VirtualMailManager.mailbox import new as new_mailbox
from VirtualMailManager.password import extract_scheme, verify_scheme
from VirtualMailManager.quotalimit import QuotaLimit
from VirtualMailManager.relocated import Relocated
from VirtualMailManager.serviceset import ServiceSet, SERVICES
from VirtualMailManager.transport import Transport


_ = lambda msg: msg

CFG_FILE = 'vmm.cfg'
CFG_PATH = '/root:/usr/local/etc:/etc'
RE_DOMAIN_SEARCH = """^[a-z0-9-\.]+$"""
OTHER_TYPES = {
    TYPE_ACCOUNT: (_('an account'), ACCOUNT_EXISTS),
    TYPE_ALIAS: (_('an alias'), ALIAS_EXISTS),
    TYPE_RELOCATED: (_('a relocated user'), RELOCATED_EXISTS),
}


class Handler(object):
    """Wrapper class to simplify the access on all the stuff from
    VirtualMailManager"""
    __slots__ = ('_cfg', '_cfg_fname', '_dbh', '_warnings')

    def __init__(self, skip_some_checks=False):
        """Creates a new Handler instance.

        ``skip_some_checks`` : bool
            When a derived class knows how to handle all checks this
            argument may be ``True``. By default it is ``False`` and
            all checks will be performed.

        Throws a NotRootError if your uid is greater 0.
        """
        self._cfg_fname = ''
        self._warnings = []
        self._cfg = None
        self._dbh = None

        if os.geteuid():
            raise NotRootError(_("You are not root.\n\tGood bye!\n"),
                               CONF_NOPERM)
        if self._check_cfg_file():
            self._cfg = Cfg(self._cfg_fname)
            self._cfg.load()
        if not skip_some_checks:
            self._cfg.check()
            self._chkenv()

    def _find_cfg_file(self):
        """Search the CFG_FILE in CFG_PATH.
        Raise a VMMError when no vmm.cfg could be found.
        """
        for path in CFG_PATH.split(':'):
            tmp = os.path.join(path, CFG_FILE)
            if os.path.isfile(tmp):
                self._cfg_fname = tmp
                break
        if not self._cfg_fname:
            raise VMMError(_("Could not find '%(cfg_file)s' in: "
                             "'%(cfg_path)s'") % {'cfg_file': CFG_FILE,
                           'cfg_path': CFG_PATH}, CONF_NOFILE)

    def _check_cfg_file(self):
        """Checks the configuration file, returns bool"""
        GRPRW = S_IRGRP | S_IWGRP
        OTHRW = S_IROTH | S_IWOTH
        self._find_cfg_file()
        fstat = os.stat(self._cfg_fname)
        if (fstat.st_uid == fstat.st_gid and fstat.st_mode & OTHRW) or \
           (fstat.st_uid != fstat.st_gid and fstat.st_mode & (GRPRW | OTHRW)):
            # TP: Please keep the backticks around the command. `chmod 0600 …`
            raise PermissionError(_("wrong permissions for '%(file)s': "
                                    "%(perms)s\n`chmod 0600 %(file)s` would "
                                    "be great.") % {'file': self._cfg_fname,
                                  'perms': oct(fstat.st_mode)[-4:]},
                                  CONF_WRONGPERM)
        else:
            return True

    def _chkenv(self):
        """Make sure our base_directory is a directory and that all
        required executables exists and are executable.
        If not, a VMMError will be raised"""
        dir_created = False
        basedir = self._cfg.dget('misc.base_directory')
        if not os.path.exists(basedir):
            old_umask = os.umask(0o006)
            os.makedirs(basedir, 0o771)
            os.chown(basedir, 0, 0)
            os.umask(old_umask)
            dir_created = True
        if not dir_created and not lisdir(basedir):
            raise VMMError(_("'%(path)s' is not a directory.\n(%(cfg_file)s: "
                             "section 'misc', option 'base_directory')") %
                           {'path': basedir, 'cfg_file': self._cfg_fname},
                           NO_SUCH_DIRECTORY)
        for opt, val in self._cfg.items('bin'):
            try:
                exec_ok(val)
            except VMMError as err:
                if err.code in (NO_SUCH_BINARY, NOT_EXECUTABLE):
                    raise VMMError(err.msg + _("\n(%(cfg_file)s: section "
                                   "'bin', option '%(option)s')") %
                                   {'cfg_file': self._cfg_fname,
                                    'option': opt}, err.code)
                else:
                    raise

    def _db_connect(self):
        """Return a new psycopg2 connection object."""
        if self._dbh is None or \
          (isinstance(self._dbh, psycopg2.extensions.connection) and
           self._dbh.closed):
            try:
                self._dbh = psycopg2.connect(
                        host=self._cfg.dget('database.host'),
                        sslmode=self._cfg.dget('database.sslmode'),
                        port=self._cfg.dget('database.port'),
                        database=self._cfg.dget('database.name'),
                        user=self._cfg.pget('database.user'),
                        password=self._cfg.pget('database.pass'))
                self._dbh.set_client_encoding('utf8')
                dbc = self._dbh.cursor()
                dbc.execute("SET NAMES 'UTF8'")
                dbc.close()
            except psycopg2.DatabaseError as err:
                raise VMMError(str(err), DATABASE_ERROR)

    def _chk_other_address_types(self, address, exclude):
        """Checks if the EmailAddress *address* is known as `TYPE_ACCOUNT`,
        `TYPE_ALIAS` or `TYPE_RELOCATED`, but not as the `TYPE_*` specified
        by *exclude*.  If the *address* is known as one of the `TYPE_*`s
        the according `TYPE_*` constant will be returned.  Otherwise 0 will
        be returned."""
        assert exclude in (TYPE_ACCOUNT, TYPE_ALIAS, TYPE_RELOCATED) and \
                isinstance(address, EmailAddress)
        if exclude is not TYPE_ACCOUNT:
            account = Account(self._dbh, address)
            if account:
                return TYPE_ACCOUNT
        if exclude is not TYPE_ALIAS:
            alias = Alias(self._dbh, address)
            if alias:
                return TYPE_ALIAS
        if exclude is not TYPE_RELOCATED:
            relocated = Relocated(self._dbh, address)
            if relocated:
                return TYPE_RELOCATED
        return 0

    def _is_other_address(self, address, exclude):
        """Checks if *address* is known for an Account (TYPE_ACCOUNT),
        Alias (TYPE_ALIAS) or Relocated (TYPE_RELOCATED), except for
        *exclude*.  Returns `False` if the address is not known for other
        types.

        Raises a `VMMError` if the address is known.
        """
        other = self._chk_other_address_types(address, exclude)
        if not other:
            return False
        # TP: %(a_type)s will be one of: 'an account', 'an alias' or
        # 'a relocated user'
        msg = _("There is already %(a_type)s with the address '%(address)s'.")
        raise VMMError(msg % {'a_type': OTHER_TYPES[other][0],
                              'address': address}, OTHER_TYPES[other][1])

    def _get_account(self, address):
        """Return an Account instances for the given address (str)."""
        address = EmailAddress(address)
        self._db_connect()
        return Account(self._dbh, address)

    def _get_alias(self, address):
        """Return an Alias instances for the given address (str)."""
        address = EmailAddress(address)
        self._db_connect()
        return Alias(self._dbh, address)

    def _get_catchall(self, domain):
        """Return a CatchallAlias instances for the given domain (str)."""
        self._db_connect()
        return CatchallAlias(self._dbh, domain)

    def _get_relocated(self, address):
        """Return a Relocated instances for the given address (str)."""
        address = EmailAddress(address)
        self._db_connect()
        return Relocated(self._dbh, address)

    def _get_domain(self, domainname):
        """Return a Domain instances for the given domain name (str)."""
        self._db_connect()
        return Domain(self._dbh, domainname)

    def _get_disk_usage(self, directory):
        """Estimate file space usage for the given directory.

        Arguments:

        `directory` : basestring
          The directory to summarize recursively disk usage for
        """
        if lisdir(directory):
            return Popen([self._cfg.dget('bin.du'), "-hs", directory],
                         stdout=PIPE).communicate()[0].decode().split('\t')[0]
        else:
            self._warnings.append(_('No such directory: %s') % directory)
            return 0

    def _make_domain_dir(self, domain):
        """Create a directory for the `domain` and its accounts."""
        cwd = os.getcwd()
        hashdir, domdir = domain.directory.split(os.path.sep)[-2:]
        dir_created = False
        os.chdir(self._cfg.dget('misc.base_directory'))
        old_umask = os.umask(0o022)
        if not os.path.exists(hashdir):
            os.mkdir(hashdir, 0o711)
            os.chown(hashdir, 0, 0)
            dir_created = True
        if not dir_created and not lisdir(hashdir):
            raise VMMError(_("'%s' is not a directory.") % hashdir,
                           NO_SUCH_DIRECTORY)
        if os.path.exists(domain.directory):
            raise VMMError(_("The file/directory '%s' already exists.") %
                           domain.directory, VMM_ERROR)
        os.mkdir(os.path.join(hashdir, domdir),
                 self._cfg.dget('domain.directory_mode'))
        os.chown(domain.directory, 0, domain.gid)
        os.umask(old_umask)
        os.chdir(cwd)

    def _make_home(self, account):
        """Create a home directory for the new Account *account*."""
        domdir = account.domain.directory
        if not lisdir(domdir):
            self._make_domain_dir(account.domain)
        os.umask(0o007)
        uid = account.uid
        os.chdir(domdir)
        os.mkdir('%s' % uid, self._cfg.dget('account.directory_mode'))
        os.chown('%s' % uid, uid, account.gid)

    def _make_account_dirs(self, account):
        """Create all necessary directories for the account."""
        oldpwd = os.getcwd()
        self._make_home(account)
        mailbox = new_mailbox(account)
        mailbox.create()
        folders = self._cfg.dget('mailbox.folders').split(':')
        if any(folders):
            bad = mailbox.add_boxes(folders,
                                    self._cfg.dget('mailbox.subscribe'))
            if bad:
                self._warnings.append(_("Skipped mailbox folders:") +
                                      '\n\t- ' + '\n\t- '.join(bad))
        os.chdir(oldpwd)

    def _delete_home(self, domdir, uid, gid):
        """Delete a user's home directory.

        Arguments:

        `domdir` : basestring
          The directory of the domain the user belongs to
          (commonly AccountObj.domain.directory)
        `uid` : int
          The user's UID (commonly AccountObj.uid)
        `gid` : int
          The user's GID (commonly AccountObj.gid)
        """
        assert all(isinstance(xid, int) for xid in (uid, gid)) and \
                isinstance(domdir, str)
        if uid < MIN_UID or gid < MIN_GID:
            raise VMMError(_("UID '%(uid)u' and/or GID '%(gid)u' are less "
                             "than %(min_uid)u/%(min_gid)u.") % {'uid': uid,
                           'gid': gid, 'min_gid': MIN_GID, 'min_uid': MIN_UID},
                           MAILDIR_PERM_MISMATCH)
        if domdir.count('..'):
            raise VMMError(_('Found ".." in domain directory path: %s') %
                           domdir, FOUND_DOTS_IN_PATH)
        if not lisdir(domdir):
            raise VMMError(_("No such directory: %s") % domdir,
                           NO_SUCH_DIRECTORY)
        os.chdir(domdir)
        userdir = '%s' % uid
        if not lisdir(userdir):
            self._warnings.append(_("No such directory: %s") %
                                  os.path.join(domdir, userdir))
            return
        mdstat = os.lstat(userdir)
        if (mdstat.st_uid, mdstat.st_gid) != (uid, gid):
            raise VMMError(_('Detected owner/group mismatch in home '
                             'directory.'), MAILDIR_PERM_MISMATCH)
        rmtree(userdir, ignore_errors=True)

    def _delete_domain_dir(self, domdir, gid):
        """Delete a domain's directory.

        Arguments:

        `domdir` : basestring
          The domain's directory (commonly DomainObj.directory)
        `gid` : int
          The domain's GID (commonly DomainObj.gid)
        """
        assert isinstance(domdir, str) and isinstance(gid, int)
        if gid < MIN_GID:
            raise VMMError(_("GID '%(gid)u' is less than '%(min_gid)u'.") %
                           {'gid': gid, 'min_gid': MIN_GID},
                           DOMAINDIR_GROUP_MISMATCH)
        if domdir.count('..'):
            raise VMMError(_('Found ".." in domain directory path: %s') %
                           domdir, FOUND_DOTS_IN_PATH)
        if not lisdir(domdir):
            self._warnings.append(_('No such directory: %s') % domdir)
            return
        dirst = os.lstat(domdir)
        if dirst.st_gid != gid:
            raise VMMError(_('Detected group mismatch in domain directory: '
                             '%s') % domdir, DOMAINDIR_GROUP_MISMATCH)
        rmtree(domdir, ignore_errors=True)

    def has_warnings(self):
        """Checks if warnings are present, returns bool."""
        return bool(len(self._warnings))

    def get_warnings(self):
        """Returns a list with all available warnings and resets all
        warnings.
        """
        ret_val = self._warnings[:]
        del self._warnings[:]
        return ret_val

    def cfg_dget(self, option):
        """Get the configured value of the *option* (section.option).
        When the option was not configured its default value will be
        returned."""
        return self._cfg.dget(option)

    def cfg_pget(self, option):
        """Get the configured value of the *option* (section.option)."""
        return self._cfg.pget(option)

    def cfg_install(self):
        """Installs the cfg_dget method as ``cfg_dget`` into the built-in
        namespace."""
        import builtins
        assert 'cfg_dget' not in builtins.__dict__
        builtins.__dict__['cfg_dget'] = self._cfg.dget

    def domain_add(self, domainname, transport=None, note=None):
        """Wrapper around Domain's set_quotalimit, set_transport and save."""
        dom = self._get_domain(domainname)
        if transport is None:
            dom.set_transport(Transport(self._dbh,
                              transport=self._cfg.dget('domain.transport')))
        else:
            dom.set_transport(Transport(self._dbh, transport=transport))
        if note:
            dom.set_note(note)
        dom.set_quotalimit(QuotaLimit(self._dbh,
                           bytes=int(self._cfg.dget('domain.quota_bytes')),
                           messages=self._cfg.dget('domain.quota_messages')))
        dom.set_serviceset(ServiceSet(self._dbh,
                                      imap=self._cfg.dget('domain.imap'),
                                      pop3=self._cfg.dget('domain.pop3'),
                                      sieve=self._cfg.dget('domain.sieve'),
                                      smtp=self._cfg.dget('domain.smtp')))
        dom.set_directory(self._cfg.dget('misc.base_directory'))
        dom.save()
        self._make_domain_dir(dom)

    def domain_quotalimit(self, domainname, bytes_, messages=0, force=False):
        """Wrapper around Domain.update_quotalimit()."""
        if not all(isinstance(i, int) for i in (bytes_, messages)):
            raise TypeError("'bytes_' and 'messages' have to be "
                            "integers or longs.")
        assert isinstance(force, bool)
        dom = self._get_domain(domainname)
        quotalimit = QuotaLimit(self._dbh, bytes=bytes_, messages=messages)
        dom.update_quotalimit(quotalimit, force)

    def domain_services(self, domainname, force, services, action):
        """Wrapper around Domain.update_serviceset()."""
        assert isinstance(force, bool)

        if action not in (ACTION_ENABLE, ACTION_DISABLE):
            raise VMMError(_("Invalid action for domain_services: '%s'.") %
                        action, INVALID_ACTION)

        dom = self._get_domain(domainname)
        current_services = dom.serviceset.services

        if action == ACTION_ENABLE:
            for service in set(services):
                if service not in SERVICES:
                    raise VMMError(_("Unknown service: '%s'") % service,
                                UNKNOWN_SERVICE)
                current_services[service] = True
        elif action == ACTION_DISABLE:
            for service in set(services):
                if service not in SERVICES:
                    raise VMMError(_("Unknown service: '%s'") % service,
                                UNKNOWN_SERVICE)
                current_services[service] = False

        serviceset = ServiceSet(self._dbh, **current_services)
        dom.update_serviceset(serviceset, force)

    def domain_transport(self, domainname, transport, force=False):
        """Wrapper around Domain.update_transport()"""
        assert isinstance(force, bool)
        dom = self._get_domain(domainname)
        trsp = Transport(self._dbh, transport=transport)
        dom.update_transport(trsp, force)

    def domain_note(self, domainname, note):
        """Wrapper around Domain.update_note()"""
        dom = self._get_domain(domainname)
        dom.update_note(note)

    def domain_delete(self, domainname, del_dir, force=False):
        """Wrapper around Domain.delete()"""
        if not isinstance(del_dir, bool):
            raise TypeError('del_dir must be a bool')
        if not isinstance(force, bool):
            raise TypeError('force must be a bool')
        dom = self._get_domain(domainname)
        gid = dom.gid
        domdir = dom.directory
        if force or self._cfg.dget('domain.force_deletion'):
            dom.delete(True)
        else:
            dom.delete(False)
        if del_dir or self._cfg.dget('domain.delete_directory'):
            self._delete_domain_dir(domdir, gid)

    def domain_info(self, domainname, details=None):
        """Wrapper around Domain.get_info(), Domain.get_accounts(),
        Domain.get_aliase_names(), Domain.get_aliases() and
        Domain.get_relocated."""
        if details not in [None, 'accounts', 'aliasdomains', 'aliases', 'full',
                           'relocated', 'catchall']:
            raise VMMError(_("Invalid argument: '%s'") % details,
                           INVALID_ARGUMENT)
        dom = self._get_domain(domainname)
        dominfo = dom.get_info()
        if dominfo['domain name'].startswith('xn--') or \
           dominfo['domain name'].count('.xn--'):
            dominfo['domain name'] += ' (%s)' % \
                         dominfo['domain name'].encode('utf-8').decode('idna')
        if details is None:
            return dominfo
        elif details == 'accounts':
            return (dominfo, dom.get_accounts())
        elif details == 'aliasdomains':
            return (dominfo, dom.get_aliase_names())
        elif details == 'aliases':
            return (dominfo, dom.get_aliases())
        elif details == 'relocated':
            return(dominfo, dom.get_relocated())
        elif details == 'catchall':
            return(dominfo, dom.get_catchall())
        else:
            return (dominfo, dom.get_aliase_names(), dom.get_accounts(),
                    dom.get_aliases(), dom.get_relocated(), dom.get_catchall())

    def aliasdomain_add(self, aliasname, domainname):
        """Adds an alias domain to the domain.

        Arguments:

        `aliasname` : basestring
          The name of the alias domain
        `domainname` : basestring
          The name of the target domain
        """
        dom = self._get_domain(domainname)
        alias_dom = AliasDomain(self._dbh, aliasname)
        alias_dom.set_destination(dom)
        alias_dom.save()

    def aliasdomain_info(self, aliasname):
        """Returns a dict (keys: "alias" and "domain") with the names of
        the alias domain and its primary domain."""
        self._db_connect()
        alias_dom = AliasDomain(self._dbh, aliasname)
        return alias_dom.info()

    def aliasdomain_switch(self, aliasname, domainname):
        """Modifies the target domain of an existing alias domain.

        Arguments:

        `aliasname` : basestring
          The name of the alias domain
        `domainname` : basestring
          The name of the new target domain
        """
        dom = self._get_domain(domainname)
        alias_dom = AliasDomain(self._dbh, aliasname)
        alias_dom.set_destination(dom)
        alias_dom.switch()

    def aliasdomain_delete(self, aliasname):
        """Deletes the given alias domain.

        Argument:

        `aliasname` : basestring
          The name of the alias domain
        """
        self._db_connect()
        alias_dom = AliasDomain(self._dbh, aliasname)
        alias_dom.delete()

    def domain_list(self, pattern=None):
        """Wrapper around function search() from module Domain."""
        from VirtualMailManager.domain import search
        like = False
        if pattern and (pattern.startswith('%') or pattern.endswith('%')):
            like = True
            if not re.match(RE_DOMAIN_SEARCH, pattern.strip('%')):
                raise VMMError(_("The pattern '%s' contains invalid "
                                 "characters.") % pattern, DOMAIN_INVALID)
        self._db_connect()
        return search(self._dbh, pattern=pattern, like=like)

    def address_list(self, typelimit, pattern=None):
        """TODO"""
        llike = dlike = False
        lpattern = dpattern = None
        if pattern:
            parts = pattern.split('@', 2)
            if len(parts) == 2:
                # The pattern includes '@', so let's treat the
                # parts separately to allow for pattern search like %@domain.%
                lpattern = parts[0]
                llike = lpattern.startswith('%') or lpattern.endswith('%')
                dpattern = parts[1]
                dlike = dpattern.startswith('%') or dpattern.endswith('%')

                checkp = lpattern.strip('%') if llike else lpattern
                if len(checkp) > 0 and re.search(RE_LOCALPART, checkp):
                    raise VMMError(_("The pattern '%s' contains invalid "
                                     "characters.") % pattern,
                                   LOCALPART_INVALID)
            else:
                # else just match on domains
                # (or should that be local part, I don't know…)
                dpattern = parts[0]
                dlike = dpattern.startswith('%') or dpattern.endswith('%')

            checkp = dpattern.strip('%') if dlike else dpattern
            if len(checkp) > 0 and not re.match(RE_DOMAIN_SEARCH, checkp):
                raise VMMError(_("The pattern '%s' contains invalid "
                                 "characters.") % pattern, DOMAIN_INVALID)
        self._db_connect()
        from VirtualMailManager.common import search_addresses
        return search_addresses(self._dbh, typelimit=typelimit,
                                lpattern=lpattern, llike=llike,
                                dpattern=dpattern, dlike=dlike)

    def user_add(self, emailaddress, password, note=None):
        """Wrapper around Account.set_password() and Account.save()."""
        acc = self._get_account(emailaddress)
        if acc:
            raise VMMError(_("The account '%s' already exists.") %
                           acc.address, ACCOUNT_EXISTS)
        self._is_other_address(acc.address, TYPE_ACCOUNT)
        acc.set_password(password)
        if note:
            acc.set_note(note)
        acc.save()
        self._make_account_dirs(acc)

    def alias_add(self, aliasaddress, *targetaddresses):
        """Creates a new `Alias` entry for the given *aliasaddress* with
        the given *targetaddresses*."""
        alias = self._get_alias(aliasaddress)
        if not alias:
            self._is_other_address(alias.address, TYPE_ALIAS)
        destinations = [DestinationEmailAddress(addr, self._dbh)
                        for addr in targetaddresses]
        warnings = []
        destinations = alias.add_destinations(destinations, warnings)
        if warnings:
            self._warnings.append(_('Ignored destination addresses:'))
            self._warnings.extend(('  * %s' % w for w in warnings))
        for destination in destinations:
            if destination.gid and \
               not self._chk_other_address_types(destination, TYPE_RELOCATED):
                self._warnings.append(_("The destination account/alias '%s' "
                                        "does not exist.") % destination)

    def user_delete(self, emailaddress, del_dir, force=False):
        """Wrapper around Account.delete(...)"""
        if not isinstance(del_dir, bool):
            raise TypeError('del_dir must be a bool')
        if not isinstance(force, bool):
            raise TypeError('force must be a bool')
        acc = self._get_account(emailaddress)
        if not acc:
            raise VMMError(_("The account '%s' does not exist.") %
                           acc.address, NO_SUCH_ACCOUNT)
        uid = acc.uid
        gid = acc.gid
        dom_dir = acc.domain.directory
        acc_dir = acc.home
        acc.delete(force)
        if del_dir or self._cfg.dget('account.delete_directory'):
            try:
                self._delete_home(dom_dir, uid, gid)
            except VMMError as err:
                if err.code in (FOUND_DOTS_IN_PATH, MAILDIR_PERM_MISMATCH,
                                NO_SUCH_DIRECTORY):
                    warning = _("""\
The account has been successfully deleted from the database.
    But an error occurred while deleting the following directory:
    '%(directory)s'
    Reason: %(reason)s""") % {'directory': acc_dir, 'reason': err.msg}
                    self._warnings.append(warning)
                else:
                    raise

    def alias_info(self, aliasaddress):
        """Returns an iterator object for all destinations (`EmailAddress`
        instances) for the `Alias` with the given *aliasaddress*."""
        alias = self._get_alias(aliasaddress)
        if alias:
            return alias.get_destinations()
        if not self._is_other_address(alias.address, TYPE_ALIAS):
            raise VMMError(_("The alias '%s' does not exist.") %
                           alias.address, NO_SUCH_ALIAS)

    def alias_delete(self, aliasaddress, targetaddresses=None):
        """Deletes the `Alias` *aliasaddress* with all its destinations from
        the database. If *targetaddresses* is not ``None``, only the given
        destinations will be removed from the alias."""
        alias = self._get_alias(aliasaddress)
        error = None
        if targetaddresses is None:
            alias.delete()
        else:
            destinations = [DestinationEmailAddress(addr, self._dbh)
                            for addr in targetaddresses]
            warnings = []
            try:
                alias.del_destinations(destinations, warnings)
            except VMMError as err:
                error = err
            if warnings:
                self._warnings.append(_('Ignored destination addresses:'))
                self._warnings.extend(('  * %s' % w for w in warnings))
            if error:
                raise error

    def catchall_add(self, domain, *targetaddresses):
        """Creates a new `CatchallAlias` entry for the given *domain* with
        the given *targetaddresses*."""
        catchall = self._get_catchall(domain)
        destinations = [DestinationEmailAddress(addr, self._dbh)
                        for addr in targetaddresses]
        warnings = []
        destinations = catchall.add_destinations(destinations, warnings)
        if warnings:
            self._warnings.append(_('Ignored destination addresses:'))
            self._warnings.extend(('  * %s' % w for w in warnings))
        for destination in destinations:
            if destination.gid and \
               not self._chk_other_address_types(destination, TYPE_RELOCATED):
                self._warnings.append(_("The destination account/alias '%s' "
                                        "does not exist.") % destination)

    def catchall_info(self, domain):
        """Returns an iterator object for all destinations (`EmailAddress`
        instances) for the `CatchallAlias` with the given *domain*."""
        return self._get_catchall(domain).get_destinations()

    def catchall_delete(self, domain, targetaddresses=None):
        """Deletes the `CatchallAlias` for domain *domain* with all its
        destinations from the database.  If *targetaddresses* is not
        ``None``,  only those destinations will be removed from the alias."""
        catchall = self._get_catchall(domain)
        error = None
        if targetaddresses is None:
            catchall.delete()
        else:
            destinations = [DestinationEmailAddress(addr, self._dbh)
                            for addr in targetaddresses]
            warnings = []
            try:
                catchall.del_destinations(destinations, warnings)
            except VMMError as err:
                error = err
            if warnings:
                self._warnings.append(_('Ignored destination addresses:'))
                self._warnings.extend(('  * %s' % w for w in warnings))
            if error:
                raise error

    def user_info(self, emailaddress, details=None):
        """Wrapper around Account.get_info(...)"""
        if details not in (None, 'du', 'aliases', 'full'):
            raise VMMError(_("Invalid argument: '%s'") % details,
                           INVALID_ARGUMENT)
        acc = self._get_account(emailaddress)
        if not acc:
            if not self._is_other_address(acc.address, TYPE_ACCOUNT):
                raise VMMError(_("The account '%s' does not exist.") %
                               acc.address, NO_SUCH_ACCOUNT)
        info = acc.get_info()
        if self._cfg.dget('account.disk_usage') or details in ('du', 'full'):
            path = os.path.join(acc.home, acc.mail_location.directory)
            info['disk usage'] = self._get_disk_usage(path)
            if details in (None, 'du'):
                return info
        if details in ('aliases', 'full'):
            return (info, acc.get_aliases())
        return info

    def user_by_uid(self, uid):
        """Search for an Account by its *uid*.
        Returns a dict (address, uid and gid) if a user could be found."""
        from VirtualMailManager.account import get_account_by_uid
        self._db_connect()
        return get_account_by_uid(uid, self._dbh)

    def user_password(self, emailaddress, password, scheme=None):
        """Wrapper for Account.update_password(...)."""
        if not isinstance(password, str) or not password:
            raise VMMError(_("Could not accept password: '%s'") % password,
                           INVALID_ARGUMENT)
        acc = self._get_account(emailaddress)
        if not acc:
            raise VMMError(_("The account '%s' does not exist.") %
                           acc.address, NO_SUCH_ACCOUNT)
        acc.update_password(password, scheme)

    def user_pwhash(self, emailaddress, pwhash):
        """Wrapper for Account.modify('pwhash', ...)"""
        scheme = extract_scheme(pwhash)
        if not scheme:
            raise VMMError(_('Missing {SCHEME} prefix from password hash.'),
                           INVALID_ARGUMENT)
        else:
            scheme, encoding = verify_scheme(scheme)  # or die …
        acc = self._get_account(emailaddress)
        if not acc:
            raise VMMError(_("The account '%s' does not exist.") %
                           acc.address, NO_SUCH_ACCOUNT)
        acc.modify('pwhash', pwhash)

    def user_name(self, emailaddress, name):
        """Wrapper for Account.modify('name', ...)."""
        acc = self._get_account(emailaddress)
        if not acc:
            raise VMMError(_("The account '%s' does not exist.") %
                           acc.address, NO_SUCH_ACCOUNT)
        acc.modify('name', name)

    def user_note(self, emailaddress, note):
        """Wrapper for Account.modify('note', ...)."""
        acc = self._get_account(emailaddress)
        if not acc:
            raise VMMError(_("The account '%s' does not exist.") %
                           acc.address, NO_SUCH_ACCOUNT)
        acc.modify('note', note)

    def user_quotalimit(self, emailaddress, bytes_, messages=0):
        """Wrapper for Account.update_quotalimit(QuotaLimit)."""
        acc = self._get_account(emailaddress)
        if not acc:
            raise VMMError(_("The account '%s' does not exist.") %
                        acc.address, NO_SUCH_ACCOUNT)
        if bytes_ == 'domain':
            quotalimit = None
        else:
            if not all(isinstance(i, int) for i in (bytes_, messages)):
                raise TypeError("'bytes_' and 'messages' have to be "
                                "integers or longs.")
            quotalimit = QuotaLimit(self._dbh, bytes=bytes_,
                                    messages=messages)
        acc.update_quotalimit(quotalimit)

    def user_transport(self, emailaddress, transport):
        """Wrapper for Account.update_transport(Transport)."""
        if not isinstance(transport, str) or not transport:
            raise VMMError(_("Could not accept transport: '%s'") % transport,
                           INVALID_ARGUMENT)
        acc = self._get_account(emailaddress)
        if not acc:
            raise VMMError(_("The account '%s' does not exist.") %
                           acc.address, NO_SUCH_ACCOUNT)
        transport = None if transport == 'domain' \
                         else Transport(self._dbh, transport=transport)
        acc.update_transport(transport)

    def user_services(self, emailaddress, services, action):
        """Wrapper around Account.update_serviceset()."""
        if action not in (ACTION_ENABLE, ACTION_DISABLE, ACTION_RESET):
            raise VMMError(_("Invalid action for user_services: '%s'.") %
                        action, INVALID_ACTION)
        acc = self._get_account(emailaddress)
        if not acc:
            raise VMMError(_("The account '%s' does not exist.") %
                        acc.address, NO_SUCH_ACCOUNT)

        current_serviceset = acc.serviceset
        if current_serviceset is None:
            current_serviceset = acc.domain.serviceset

        current_services = current_serviceset.services

        if action == ACTION_RESET:
            serviceset = None
        elif action == ACTION_ENABLE:
            for service in set(services):
                if service not in SERVICES:
                    raise VMMError(_("Unknown service: '%s'") % service,
                                UNKNOWN_SERVICE)
                current_services[service] = True
            serviceset = ServiceSet(self._dbh, **current_services)
        elif action == ACTION_DISABLE:
            for service in set(services):
                if service not in SERVICES:
                    raise VMMError(_("Unknown service: '%s'") % service,
                                UNKNOWN_SERVICE)
                current_services[service] = False
            serviceset = ServiceSet(self._dbh, **current_services)
        acc.update_serviceset(serviceset)

    def relocated_add(self, emailaddress, targetaddress):
        """Creates a new `Relocated` entry in the database. If there is
        already a relocated user with the given *emailaddress*, only the
        *targetaddress* for the relocated user will be updated."""
        relocated = self._get_relocated(emailaddress)
        if not relocated:
            self._is_other_address(relocated.address, TYPE_RELOCATED)
        destination = DestinationEmailAddress(targetaddress, self._dbh)
        relocated.set_destination(destination)
        if destination.gid and \
           not self._chk_other_address_types(destination, TYPE_RELOCATED):
            self._warnings.append(_("The destination account/alias '%s' "
                                    "does not exist.") % destination)

    def relocated_info(self, emailaddress):
        """Returns the target address of the relocated user with the given
        *emailaddress*."""
        relocated = self._get_relocated(emailaddress)
        if relocated:
            return relocated.get_info()
        if not self._is_other_address(relocated.address, TYPE_RELOCATED):
            raise VMMError(_("The relocated user '%s' does not exist.") %
                           relocated.address, NO_SUCH_RELOCATED)

    def relocated_delete(self, emailaddress):
        """Deletes the relocated user with the given *emailaddress* from
        the database."""
        relocated = self._get_relocated(emailaddress)
        relocated.delete()

del _
