Merge branch 'master' into Docker

* upgrade baseimage to python 3.13

Dockerfile

@@ -0,0 +1,36 @@
+# Nutze ein schlankes Python-Image
+FROM python:3.13-slim-bullseye
+
+ENV PYTHONUNBUFFERED 1
+
+WORKDIR /konova
+
+# Installiere System-Abhängigkeiten
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    gdal-bin redis-server nginx \
+    && rm -rf /var/lib/apt/lists/*  # Platz sparen
+
+# Erstelle benötigte Verzeichnisse & setze Berechtigungen
+RUN mkdir -p /var/log/nginx /var/log/gunicorn /var/lib/nginx /tmp/nginx_client_body \
+    && touch /var/log/nginx/access.log /var/log/nginx/error.log \
+    && chown -R root:root /var/log/nginx /var/lib/nginx /tmp/nginx_client_body
+
+# Kopiere und installiere Python-Abhängigkeiten
+COPY ./requirements.txt /konova/
+RUN pip install --upgrade pip && pip install --no-cache-dir -r requirements.txt
+
+# Entferne Standard-Nginx-Site und ersetze sie durch eigene Config
+RUN rm -rf /etc/nginx/sites-enabled/default
+COPY ./nginx.conf /etc/nginx/conf.d
+
+# Kopiere restliche Projektdateien
+COPY . /konova/
+
+# Sammle statische Dateien
+RUN python manage.py collectstatic --noinput
+
+# Exponiere Ports
+#EXPOSE 80 6379 8000
+
+# Setze Entrypoint
+ENTRYPOINT ["/konova/docker-entrypoint.sh"]

README.md

@@ -4,6 +4,7 @@ the database postgresql and the css library bootstrap as well as the icon packag
 fontawesome for a modern look, following best practices from the industry.
 
 ## Background processes
+### !!! For non-docker run
 Konova uses celery for background processing. To start the worker you need to run
 ```shell
 $ celery -A konova worker -l INFO
@@ -18,3 +19,58 @@ Technical documention is provided in the projects git wiki.
 A user documentation is not available (and not needed, yet). 
 
 
+# Docker 
+To run the docker-compose as expected, you need to take the following steps:
+
+1. Create a database containing docker, using an appropriate Dockerfile, e.g. the following
+```
+version: '3.3'
+services:
+  postgis:
+    image: postgis/postgis
+    restart: always
+    container_name: postgis-docker
+    ports: 
+      - 5433:5432
+    volumes:
+      - db-volume:/var/lib/postgresql/data
+    environment:
+      - POSTGRES_PASSWORD=postgres
+      - POSTGRES_USER=postgres
+    networks:
+      - db-network-bridge
+
+networks:
+  db-network-bridge:
+    driver: "bridge"
+
+volumes:
+  db-volume:
+```
+This Dockerfile creates a Docker container running postgresql and postgis, creates the default superuser postgres, 
+creates a named volume for persisting the database and creates a new network bridge, which **must be used by any other
+container, which wants to write/read on this database**. 
+
+2. Make sure the name of the network bridge above matches the network in the konova docker-compose.yml  
+3. Get into the running postgis container (`docker exec -it postgis-docker bash`) and create new databases, users and so on. Make sure the database `konova` exists now!
+4. Replace all `CHANGE_ME_xy` values inside of konova/docker-compose.yml for your installation. Make sure the `SSO_HOST` holds the proper SSO host, e.g. for the arnova project `arnova.example.org` (Arnova must be installed and the webserver configured as well, of course)
+5. Take a look on konova/settings.py and konova/sub_settings/django_settings.py. Again: Replace all occurences of `CHANGE_ME` with proper values for your installation.
+   1. Make sure you have the proper host strings added to `ALLOWED_HOSTS` inside of django_settings.py.  
+6. Build and run the docker setup using `docker-compose build` and `docker-compose start` from the main directory of this project (where the docker-compose.yml lives)
+7. Run migrations! To do so, get into the konova service container (`docker exec -it konova-docker bash`) and run the needed commands (`python manage.py makemigrations LIST_OF_ALL_MIGRATABLE_APPS`, then `python manage.py migrate`)
+8. Run the setup command `python manage.py setup` and follow the instructions on the CLI
+9. To enable **SMTP** mail support, make sure your host machine (the one where the docker container run) has the postfix service configured properly. Make sure the `mynetworks` variable is xtended using the docker network bridge ip, created in the postgis container and used by the konova services.
+   1. **Hint**: You can find out this easily by trying to perform a test mail in the running konova web application (which will fail, of course). Then take a look to the latest entries in `/var/log/mail.log` on your host machine. The failed IP will be displayed there.
+   2. **Please note**: This installation guide is based on SMTP using postfix! 
+   3. Restart the postfix service on your host machine to reload the new configuration (`service postfix restart`)
+10. Finally, make sure your host machine webserver passes incoming requests properly to the docker nginx webserver of konova. A proper nginx config for the host machine may look like this:
+```
+server {
+    server_name konova.domain.org;
+
+    location / {
+        proxy_pass http://localhost:KONOVA_NGINX_DOCKER_PORT/;
+        proxy_set_header Host $host;
+    }
+}
+```

api/migrations/0004_externalidentifier.py

@@ -1,23 +0,0 @@
-# Generated by Django 6.0.5 on 2026-05-10 07:18
-
-import django.db.models.deletion
-from django.db import migrations, models
-
-
-class Migration(migrations.Migration):
-
-    dependencies = [
-        ('api', '0003_oauthtoken'),
-        ('user', '0010_user_sso_identifier'),
-    ]
-
-    operations = [
-        migrations.CreateModel(
-            name='ExternalIdentifier',
-            fields=[
-                ('external_id', models.CharField(db_comment='Identifier from a source system', max_length=255, primary_key=True, serialize=False)),
-                ('internal_id', models.UUIDField(db_comment='Identifier in konova')),
-                ('created', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='+', to='user.useractionlogentry')),
-            ],
-        ),
-    ]

api/models/__init__.py

@@ -6,4 +6,3 @@ Created on: 21.01.22
 
 """
 from .token import *
-from .external_identifier import *

api/models/external_identifier.py

@@ -1,51 +0,0 @@
-"""
-Author: Michel Peltriaux
-Created on: 10.05.26
-
-"""
-from django.db import models
-
-
-class ExternalIdentifier(models.Model):
-    """ Holds a lookup to match a given external identifier against the internal identifier in konova.
-
-    Relevant in cases of API transmitted entries, which are updates using external identifiers instead of
-    the internal ones directly.
-
-    """
-    external_id = models.CharField(
-        max_length=255,
-        primary_key=True,
-        db_comment="Identifier from a source system"
-    )
-    internal_id = models.UUIDField(
-        db_comment="Identifier in konova"
-    )
-    created = models.ForeignKey(
-        "user.UserActionLogEntry",
-        on_delete=models.SET_NULL,
-        null=True,
-        blank=True,
-        related_name='+'
-    )
-
-    def __str__(self):
-        return f"{self.external_id} -> {self.internal_id}"
-
-    @staticmethod
-    def resolve_external_identifier(external_identifier: str):
-        """ Returns a ExternalIdentifier object, if the given parameter could be resolved as an external identifier.
-
-        Args:
-            external_identifier (str): An external identifier.
-
-        Returns:
-            ExternalIdentifier | None
-        """
-        if external_identifier:
-            try:
-                obj = ExternalIdentifier.objects.get(external_id=external_identifier)
-                return obj
-            except ExternalIdentifier.DoesNotExist:
-                pass
-        return None

api/tests/v1/create/compensation_create_post_body.json

@@ -8,7 +8,6 @@
         "is_coherence_keeping": false,
         "is_pik": false,
         "intervention": "MUST_BE_SET_IN_TEST",
-        "external_identifier": "LOREMIPSUM-123",
         "before_states": [
         ],
         "after_states": [

api/tests/v1/create/ecoaccount_create_post_body.json

@@ -4,7 +4,6 @@
     ],
     "properties": {
         "title": "Test_ecoaccount",
-        "external_identifier": "LOREMIPSUM-1234",
         "deductable_surface": 10000.0,
         "is_pik": false,
         "responsible": {

api/tests/v1/create/ema_create_post_body.json

@@ -4,7 +4,6 @@
     ],
     "properties": {
         "title": "Test_ema",
-        "external_identifier": "LOREMIPSUM-1235",
         "is_pik": false,
         "responsible": {
             "conservation_office": null,

api/tests/v1/create/intervention_create_post_body.json

@@ -4,7 +4,6 @@
     ],
     "properties": {
         "title": "Test_intervention",
-        "external_identifier": "LOREMIPSUM-1236",
         "responsible": {
             "registration_office": null,
             "registration_file_number": null,

api/tests/v1/create/test_api_create.py

@@ -9,7 +9,6 @@ import json
 
 from django.urls import reverse
 
-from api.models import ExternalIdentifier
 from api.tests.v1.share.test_api_sharing import BaseAPIV1TestCase
 
 
@@ -43,22 +42,7 @@ class APIV1CreateTestCase(BaseAPIV1TestCase):
         response = self._run_create_request(url, post_body)
         self.assertEqual(response.status_code, 200, msg=response.content)
         content = json.loads(response.content)
-        _id = content.get("id", None)
-        self.assertIsNotNone(_id, msg=response.content)
-        return _id
-
-    def _test_external_identifier_created(self, internal_id, external_id):
-        """ Tests whether an external identifier has been created
-
-        Args:
-            internal_id ():
-            external_id ():
-
-        Returns:
-
-        """
-        external_identifier = ExternalIdentifier.objects.get(internal_id=internal_id)
-        self.assertEqual(external_identifier.external_id, external_id)
+        self.assertIsNotNone(content.get("id", None), msg=response.content)
 
     def test_create_intervention(self):
         """ Tests api creation
@@ -70,8 +54,7 @@ class APIV1CreateTestCase(BaseAPIV1TestCase):
         json_file_path = "api/tests/v1/create/intervention_create_post_body.json"
         with open(json_file_path) as json_file:
             post_body = json.load(fp=json_file)
-        internal_id = self._test_create_object(url, post_body)
-        self._test_external_identifier_created(internal_id, post_body["properties"]["external_identifier"])
+        self._test_create_object(url, post_body)
 
     def test_create_compensation(self):
         """ Tests api creation
@@ -94,8 +77,7 @@ class APIV1CreateTestCase(BaseAPIV1TestCase):
 
         # Add the user to the shared users of the intervention and try again! Now everything should work as expected.
         self.intervention.users.add(self.superuser)
-        internal_id = self._test_create_object(url, post_body)
-        self._test_external_identifier_created(internal_id, post_body["properties"]["external_identifier"])
+        self._test_create_object(url, post_body)
 
     def test_create_eco_account(self):
         """ Tests api creation
@@ -107,8 +89,7 @@ class APIV1CreateTestCase(BaseAPIV1TestCase):
         json_file_path = "api/tests/v1/create/ecoaccount_create_post_body.json"
         with open(json_file_path) as json_file:
             post_body = json.load(fp=json_file)
-        internal_id = self._test_create_object(url, post_body)
-        self._test_external_identifier_created(internal_id, post_body["properties"]["external_identifier"])
+        self._test_create_object(url, post_body)
 
     def test_create_ema(self):
         """ Tests api creation
@@ -120,8 +101,7 @@ class APIV1CreateTestCase(BaseAPIV1TestCase):
         json_file_path = "api/tests/v1/create/ema_create_post_body.json"
         with open(json_file_path) as json_file:
             post_body = json.load(fp=json_file)
-        internal_id = self._test_create_object(url, post_body)
-        self._test_external_identifier_created(internal_id, post_body["properties"]["external_identifier"])
+        self._test_create_object(url, post_body)
 
     def test_create_deduction(self):
         """ Tests api creation

api/tests/v1/share/test_api_sharing.py

@@ -31,10 +31,9 @@ class APIV1SharingTestCase(BaseAPIV1TestCase):
     def setUpTestData(cls):
         super().setUpTestData()
 
-    def _run_share_request(self, url, user_list: list, team_list: list):
+    def _run_share_request(self, url, user_list: list):
         data = {
-            "users": user_list,
-            "teams": team_list
+            "users": user_list
         }
         data = json.dumps(data)
         response = self.client.put(
@@ -59,22 +58,16 @@ class APIV1SharingTestCase(BaseAPIV1TestCase):
             self.superuser.username,
             self.user.username,
         ]
-        team_list = [
-            str(self.team.id),
-        ]
 
-        response = self._run_share_request(url, user_list, team_list)
+        response = self._run_share_request(url, user_list)
 
         # Must fail, since performing user has no access on requested object
         self.assertEqual(response.status_code, 500)
         self.assertTrue(len(json.loads(response.content.decode("utf-8")).get("errors", [])) > 0)
 
-        # Add performing user to shared access users, switch from team id to team name and rerun the request
+        # Add performing user to shared access users and rerun the request
         obj.users.add(self.superuser)
-        team_list = [
-            self.team.name
-        ]
-        response = self._run_share_request(url, user_list, team_list)
+        response = self._run_share_request(url, user_list)
 
         shared_users = obj.shared_users
         self.assertEqual(response.status_code, 200)
@@ -91,14 +84,14 @@ class APIV1SharingTestCase(BaseAPIV1TestCase):
         share_url = reverse("api:v1:intervention-share", args=(self.intervention.id,))
         # Expect the first request to work properly
         self.intervention.users.add(self.superuser)
-        response = self._run_share_request(share_url, [self.superuser.username], [str(self.team.id)])
+        response = self._run_share_request(share_url, [self.superuser.username])
         self.assertEqual(response.status_code, 200)
 
         # Change the token
         self.header_data["HTTP_ksptoken"] = f"{self.superuser.api_token.token}__X"
 
         # Expect the request to fail now
-        response = self._run_share_request(share_url, [self.superuser.username], [])
+        response = self._run_share_request(share_url, [self.superuser.username])
         self.assertEqual(response.status_code, 403)
 
     def test_api_intervention_sharing(self):
@@ -151,11 +144,11 @@ class APIV1SharingTestCase(BaseAPIV1TestCase):
         self.assertEqual(self.intervention.users.count(), 1)
 
         # Try to add another user via API -> must work!
-        response = self._run_share_request(share_url, [self.superuser.username, self.user.username], [])
+        response = self._run_share_request(share_url, [self.superuser.username, self.user.username])
         self.assertEqual(response.status_code, 200)
         self.assertEqual(self.intervention.users.count(), 2)
 
         # Now try to remove the user again -> expect no changes at all to the shared user list
-        response = self._run_share_request(share_url, [self.superuser.username], [])
+        response = self._run_share_request(share_url, [self.superuser.username])
         self.assertEqual(response.status_code, 200)
         self.assertEqual(self.intervention.users.count(), 2)

api/tests/v1/update/compensation_update_put_body.json

@@ -44,7 +44,6 @@
         ],
     "properties": {
         "title": "TEST_compensation_CHANGED",
-        "external_identifier": "LOREMIPSUM-123_CHANGED",
         "is_cef": true,
         "is_coherence_keeping": true,
         "is_pik": true,

api/tests/v1/update/ecoaccount_update_put_body.json

@@ -44,7 +44,6 @@
         ],
     "properties": {
         "title": "TEST_account_CHANGED",
-        "external_identifier": "LOREMIPSUM-1234_CHANGED",
         "deductable_surface": "100000.0",
         "is_pik": true,
         "responsible": {

api/tests/v1/update/ema_update_put_body.json

@@ -44,7 +44,6 @@
         ],
     "properties": {
         "title": "TEST_EMA_CHANGED",
-        "external_identifier": "LOREMIPSUM-1235_CHANGED",
         "responsible": {
             "conservation_office": null,
             "conservation_file_number": "TEST_CHANGED",

api/tests/v1/update/intervention_update_put_body.json

@@ -44,7 +44,6 @@
         ],
     "properties": {
         "title": "Test_intervention_CHANGED",
-        "external_identifier": "LOREMIPSUM-1236_CHANGED",
         "responsible": {
             "registration_office": null,
             "registration_file_number": "CHANGED",

api/utils/serializer/serializer.py

@@ -10,11 +10,9 @@ from abc import abstractmethod
 
 from django.contrib.gis import geos
 from django.contrib.gis.geos import GEOSGeometry
-from django.core.exceptions import ObjectDoesNotExist
 from django.core.paginator import Paginator
 from django.db.models import Q
 
-from api.models import ExternalIdentifier
 from konova.models import Geometry
 from konova.utils.message_templates import DATA_UNSHARED
 
@@ -78,14 +76,6 @@ class AbstractModelAPISerializer:
             del self.lookup["id"]
         else:
             # Return certain object
-            ## But first check, whether this is an external identifier ...
-            try:
-                ## If we can find this _id on our ExternalIdentifier model, we need to map it on the internal id
-                ext_id = ExternalIdentifier.objects.get(external_id=_id)
-                _id = ext_id.internal_id
-            except ObjectDoesNotExist:
-                # If we did not find it, we assume that this is already an internal id. (Or it does not exist at all)
-                pass
             self.lookup["id"] = _id
 
         self.shared_lookup = Q(
@@ -171,14 +161,6 @@ class AbstractModelAPISerializer:
         Returns:
 
         """
-        # First if there is an external identifier linked to an internal one, so we can continue with the internal
-        try:
-            ext_id = ExternalIdentifier.objects.get(external_id=id)
-            id = ext_id.internal_id
-        except ObjectDoesNotExist:
-            # No external id found - let's hope the given id exists internally
-            pass
-
         obj = self.model.objects.get(
             id=id,
             deleted__isnull=True,

api/utils/serializer/v1/compensation.py

@@ -88,11 +88,6 @@ class CompensationAPISerializerV1(AbstractModelAPISerializerV1, AbstractCompensa
             # Nothing to do here
             return obj
 
-        # Transform a potential external identifier into an internal one
-        intervention_ext_id = self._get_external_identifier(intervention_id)
-        if intervention_ext_id:
-            intervention_id = intervention_ext_id.internal_id
-
         intervention = Intervention.objects.get(
             id=intervention_id,
         )
@@ -119,10 +114,6 @@ class CompensationAPISerializerV1(AbstractModelAPISerializerV1, AbstractCompensa
 
             # Fill in data to objects
             properties = json_model["properties"]
-
-            external_identifier = properties.get("external_identifier", None)
-            self._check_external_identifier_on_entry_creation(external_identifier)
-
             obj.identifier = obj.generate_new_identifier()
             obj.title = properties["title"]
             obj.is_cef = properties["is_cef"]
@@ -138,7 +129,6 @@ class CompensationAPISerializerV1(AbstractModelAPISerializerV1, AbstractCompensa
             obj = self._set_compensation_states(obj, properties["after_states"], obj.after_states)
             obj = self._set_deadlines(obj, properties["deadlines"])
 
-        self._set_external_identifier(obj.id, properties.get("external_identifier", None), obj.created)
         obj.log.add(obj.created)
 
         celery_update_parcels.delay(obj.geometry.id)
@@ -180,7 +170,6 @@ class CompensationAPISerializerV1(AbstractModelAPISerializerV1, AbstractCompensa
             obj = self._set_compensation_states(obj, properties["after_states"], obj.after_states)
             obj = self._set_deadlines(obj, properties["deadlines"])
 
-        self._set_external_identifier(obj.id, properties.get("external_identifier", None), update_action)
         obj.log.add(update_action)
 
         celery_update_parcels.delay(obj.geometry.id)

api/utils/serializer/v1/deduction.py

@@ -62,14 +62,6 @@ class DeductionAPISerializerV1(AbstractModelAPISerializerV1,
         if surface <= 0:
             raise ValueError("Surface must be > 0 m²")
 
-        # Check if external identifiers need to be mapped onto internal ones
-        acc_ext_id = self._get_external_identifier(acc_id)
-        intervention_ext_id = self._get_external_identifier(intervention_id)
-        if acc_ext_id:
-            acc_id = acc_ext_id.internal_id
-        if intervention_ext_id:
-            intervention_id = intervention_ext_id.internal_id
-
         acc = EcoAccount.objects.get(
             id=acc_id,
             deleted__isnull=True,

api/utils/serializer/v1/ecoaccount.py

@@ -121,9 +121,7 @@ class EcoAccountAPISerializerV1(AbstractModelAPISerializerV1,
             obj = self._initialize_objects(json_model, user)
 
             # Fill in data to objects
-            properties = json_model.get("properties", None)
-            if not properties:
-                raise AssertionError("No 'properties' found in payload!")
+            properties = json_model["properties"]
             obj.identifier = obj.generate_new_identifier()
             obj.title = properties["title"]
             obj.is_pik = properties.get("is_pik", False)
@@ -149,7 +147,6 @@ class EcoAccountAPISerializerV1(AbstractModelAPISerializerV1,
             obj = self._set_compensation_states(obj, properties["after_states"], obj.after_states)
             obj = self._set_deadlines(obj, properties["deadlines"])
 
-        self._set_external_identifier(obj.id, properties.get("external_identifier", None), obj.created)
         obj.log.add(obj.created)
         obj.users.add(user)
 
@@ -175,10 +172,6 @@ class EcoAccountAPISerializerV1(AbstractModelAPISerializerV1,
 
             # Fill in data to objects
             properties = json_model["properties"]
-
-            external_identifier = properties.get("external_identifier", None)
-            self._check_external_identifier_on_entry_creation(external_identifier)
-
             obj.title = properties["title"]
             obj.is_pik = properties.get("is_pik", False)
             obj.deductable_surface = float(properties["deductable_surface"])
@@ -199,7 +192,6 @@ class EcoAccountAPISerializerV1(AbstractModelAPISerializerV1,
             obj = self._set_compensation_states(obj, properties["after_states"], obj.after_states)
             obj = self._set_deadlines(obj, properties["deadlines"])
 
-        self._set_external_identifier(obj.id, external_identifier, update_action)
         obj.log.add(update_action)
 
         celery_update_parcels.delay(obj.geometry.id)

api/utils/serializer/v1/ema.py

@@ -104,10 +104,6 @@ class EmaAPISerializerV1(AbstractModelAPISerializerV1, AbstractCompensationAPISe
 
             # Fill in data to objects
             properties = json_model["properties"]
-
-            external_identifier = properties.get("external_identifier", None)
-            self._check_external_identifier_on_entry_creation(external_identifier)
-
             obj.identifier = obj.generate_new_identifier()
             obj.title = properties["title"]
             obj.is_pik = properties.get("is_pik", False)
@@ -123,7 +119,6 @@ class EmaAPISerializerV1(AbstractModelAPISerializerV1, AbstractCompensationAPISe
             obj = self._set_compensation_states(obj, properties["after_states"], obj.after_states)
             obj = self._set_deadlines(obj, properties["deadlines"])
 
-        self._set_external_identifier(obj.id, external_identifier, obj.created)
         obj.log.add(obj.created)
         obj.users.add(user)
 
@@ -166,7 +161,6 @@ class EmaAPISerializerV1(AbstractModelAPISerializerV1, AbstractCompensationAPISe
             obj = self._set_compensation_states(obj, properties["after_states"], obj.after_states)
             obj = self._set_deadlines(obj, properties["deadlines"])
 
-        self._set_external_identifier(obj.id, properties.get("external_identifier", None), update_action)
         obj.log.add(update_action)
 
         celery_update_parcels.delay(obj.geometry.id)

api/utils/serializer/v1/intervention.py

@@ -150,14 +150,10 @@ class InterventionAPISerializerV1(AbstractModelAPISerializerV1,
 
             # Fill in data to objects
             properties = json_model["properties"]
-
-            external_identifier = properties.get("external_identifier", None)
-            self._check_external_identifier_on_entry_creation(external_identifier)
-
             obj.identifier = obj.generate_new_identifier()
-            obj.title = properties.get("title", None)
-            self._set_responsibility(obj, properties.get("responsible", None))
-            self._set_legal(obj, properties.get("legal", None))
+            obj.title = properties["title"]
+            self._set_responsibility(obj, properties["responsible"])
+            self._set_legal(obj, properties["legal"])
 
             obj.responsible.handler.save()
             obj.responsible.save()
@@ -165,7 +161,6 @@ class InterventionAPISerializerV1(AbstractModelAPISerializerV1,
             obj.legal.save()
             obj.save()
 
-        self._set_external_identifier(obj.id, external_identifier, obj.created)
         obj.users.add(user)
         obj.log.add(obj.created)
 
@@ -191,7 +186,7 @@ class InterventionAPISerializerV1(AbstractModelAPISerializerV1,
 
             # Fill in data to objects
             properties = json_model["properties"]
-            obj.title = properties.get("title")
+            obj.title = properties["title"]
             self._set_responsibility(obj, properties.get("responsible", None))
             self._set_legal(obj, properties.get("legal", None))
             self._set_payments(obj, properties.get("payments", None))
@@ -205,7 +200,6 @@ class InterventionAPISerializerV1(AbstractModelAPISerializerV1,
             obj.save()
 
         obj.mark_as_edited(user, edit_comment="API update")
-        self._set_external_identifier(obj.id, properties.get("external_identifier", None), update_action)
         obj.send_data_to_egon()
 
         celery_update_parcels.delay(obj.geometry.id)

api/utils/serializer/v1/serializer.py

@@ -12,7 +12,6 @@ from django.contrib.gis.geos import MultiPolygon
 from django.core.exceptions import ObjectDoesNotExist
 from django.db.models import QuerySet
 
-from api.models import ExternalIdentifier
 from api.utils.serializer.serializer import AbstractModelAPISerializer
 from codelist.models import KonovaCode
 from codelist.settings import CODELIST_COMPENSATION_ACTION_ID, CODELIST_BIOTOPES_ID, CODELIST_PROCESS_TYPE_ID, \
@@ -40,20 +39,12 @@ class AbstractModelAPISerializerV1(AbstractModelAPISerializer):
         else:
             geom = MultiPolygon().geojson
         geo_json = json.loads(geom)
-        ext_ids = list(
-            ExternalIdentifier.objects.filter(
-                internal_id=entry.id
-            ).values_list(
-                "external_id", flat=True
-            )
-        )
         self.properties_data = {
             "id": entry.id,
             "identifier": entry.identifier,
             "title": entry.title,
             "created_on": self._created_on_to_json(entry),
             "modified_on": self._modified_on_to_json(entry),
-            "external_identifiers": ext_ids,
         }
         self._extend_properties_data(entry)
         geo_json["properties"] = self.properties_data
@@ -146,57 +137,6 @@ class AbstractModelAPISerializerV1(AbstractModelAPISerializer):
         success = entry.deleted is not None
         return success
 
-    def _set_external_identifier(self, internal_identifier, external_identifier, log_entry):
-        """ If an external identifier was provided in the payload, we set it
-        in the database
-
-        Args:
-            internal_identifier (BaseObject): The already processed konova object (EIV, KOM, ...)
-            external_identifier (any): The external identifier taken from the payload
-
-        Returns:
-
-        """
-        if external_identifier is None:
-            return None
-
-        ext_id_obj = ExternalIdentifier.objects.get_or_create(
-            internal_id=internal_identifier,
-            external_id=external_identifier
-        )[0]
-        if not ext_id_obj.created:
-            ext_id_obj.created = log_entry
-            ext_id_obj.save()
-
-        return ext_id_obj
-
-    def _get_external_identifier(self, external_identifier):
-        """ Checks whether a linkage based on an external identifier already exists and returns it if so.
-
-        Args:
-            external_identifier (any): The external identifier according to payload
-
-        Returns:
-            ExternalIdentifier | None
-        """
-        return ExternalIdentifier.resolve_external_identifier(external_identifier)
-
-    def _check_external_identifier_on_entry_creation(self, external_identifier):
-        """ Special check for POST processing:
-        Checks whether an external identifier already exists on the database. This hints that
-        the entry already has been created in the past. Instead of POST, the PUT method shall be used
-        to avoid creating duplicates.
-
-        Args:
-            external_identifier (any): The external identifier according to payload
-
-        Returns:
-
-        """
-        persisted_external_identifier = self._get_external_identifier(external_identifier)
-        if persisted_external_identifier:
-            raise AssertionError(f"{external_identifier} has already been initially created! Use PUT for updates!")
-
 
 class DeductableAPISerializerV1Mixin:
     class Meta:

api/views/views.py

@@ -6,14 +6,13 @@ Created on: 21.01.22
 
 """
 import json
-import uuid
 
-from django.db.models import QuerySet, Q
+from django.db.models import QuerySet
 from django.http import JsonResponse, HttpRequest
 from django.views import View
 from django.views.decorators.csrf import csrf_exempt
 
-from api.models import APIUserToken, ExternalIdentifier
+from api.models import APIUserToken
 from api.settings import KSP_TOKEN_HEADER_IDENTIFIER, KSP_USER_HEADER_IDENTIFIER
 from compensation.models import EcoAccount
 from ema.models import Ema
@@ -206,10 +205,6 @@ class AbstractModelShareAPIView(AbstractAPIView):
 
         """
         try:
-            external_identifier = ExternalIdentifier.resolve_external_identifier(id)
-            if external_identifier:
-                id = external_identifier.internal_id
-
             users = self._get_shared_users_of_object(id)
             teams = self._get_shared_teams_of_object(id)
         except Exception as e:
@@ -242,9 +237,6 @@ class AbstractModelShareAPIView(AbstractAPIView):
         """
 
         try:
-            external_identifier = ExternalIdentifier.resolve_external_identifier(id)
-            if external_identifier:
-                id = external_identifier.internal_id
             success = self._process_put_body(request.body, id)
         except Exception as e:
             return self._return_error_response(e)
@@ -317,36 +309,22 @@ class AbstractModelShareAPIView(AbstractAPIView):
             raise ValueError("Shared user list must not be empty!")
         new_teams = content.get("teams", [])
 
-        self.__process_user_sharing(new_users, obj)
-        self.__process_team_sharing(new_teams, obj)
-
-        return True
-
-    def __process_user_sharing(self, user_list: list, obj):
-        """ Processes API sharing for user payload
-
-        Args:
-            user_list (list): A list of users to share the obj with
-            obj (BaseObject): The shareable object
-
-        Returns:
-
-        """
         # Eliminate duplicates
-        new_users = list(dict.fromkeys(user_list))
+        new_users = list(dict.fromkeys(new_users))
+        new_teams = list(dict.fromkeys(new_teams))
 
         # Make sure each of these names exist as a user
         new_users_objs = []
         for user in new_users:
-            try:
-                user_obj = User.objects.get(username=user)
-            except User.DoesNotExist:
-                raise AssertionError(f"User with username {user} does not exist")
-            new_users_objs.append(user_obj)
+            new_users_objs.append(User.objects.get(username=user))
+
+        # Make sure each of these names exist as a user
+        new_teams_objs = []
+        for team_name in new_teams:
+            new_teams_objs.append(Team.objects.get(name=team_name))
 
         if self.user.is_default_group_only():
             # Default only users are not allowed to remove other users from having access. They can only add new ones!
-            # So we need to keep the ones that already have access from being removed!
             new_users_to_be_added = User.objects.filter(
                 username__in=new_users
             ).exclude(
@@ -354,44 +332,17 @@ class AbstractModelShareAPIView(AbstractAPIView):
             )
             new_users_objs = obj.shared_users.union(new_users_to_be_added)
 
+            new_teams_to_be_added = Team.objects.filter(
+                name__in=new_teams
+            ).exclude(
+                id__in=obj.shared_teams
+            )
+            new_teams_objs = obj.shared_teams.union(new_teams_to_be_added)
+
         obj.share_with_user_list(new_users_objs)
+        obj.share_with_team_list(new_teams_objs)
+        return True
 
-    def __process_team_sharing(self, team_list: list, obj):
-        """ Processes API sharing for team payload
-
-        Args:
-            team_list (list): A list of teams to share the obj with
-            obj (BaseObject): The shareable object
-
-        Returns:
-
-        """
-        # Eliminate duplicates
-        new_teams = list(dict.fromkeys(team_list))
-
-        # Resolve team names or ids into objects
-        new_team_ids = []
-        for team in new_teams:
-            try:
-                uuid.UUID(team)
-                try:
-                    new_team_ids.append(Team.objects.get(id=team).id)
-                except Team.DoesNotExist:
-                    raise AssertionError(f"Team with id {team} does not exist!")
-            except ValueError:
-                # entry is a name and not a uuid -> try to resolve as name!
-                try:
-                    new_team_ids.append(Team.objects.get(name=team).id)
-                except Team.DoesNotExist:
-                    raise AssertionError(f"Team with name {team} does not exist!")
-
-        new_team_objs = Team.objects.filter(id__in=new_team_ids)
-        if self.user.is_default_group_only():
-            # Default only users are not allowed to remove other users from having access. They can only add new ones!
-            # So we need to keep the ones that already have access from being removed!
-            new_team_objs = obj.shared_teams.union(new_team_objs)
-
-        obj.share_with_team_list(new_team_objs)
 
 class InterventionAPIShareView(AbstractModelShareAPIView):
     model = Intervention

docker-compose.yml

@@ -0,0 +1,21 @@
+services:
+  konova:
+    external_links:
+      - postgis:db
+      - arnova-nginx-server:arnova
+    build: .
+    image: "ksp/konova:x.y"
+    container_name: "konova-docker"
+    command: ./docker-entrypoint.sh
+    restart: always
+    volumes:
+      - /data/apps/konova/uploaded_files:/konova_uploaded_files
+    ports:
+      - "1337:80"
+
+# Instead of an own, new network, we need to connect to the existing one, which is provided by the postgis container
+# NOTE: THIS NETWORK MUST EXIST
+networks:
+  default:
+    name: postgis_nat_it_backend
+    external: true

docker-entrypoint.sh

@@ -0,0 +1,27 @@
+#!/bin/bash
+
+set -e  # Beende Skript bei Fehlern
+set -o pipefail  # Fehler in Pipelines nicht ignorieren
+
+# Starte Redis
+redis-server --daemonize yes
+
+# Starte Celery Worker im Hintergrund
+celery -A konova worker --loglevel=info &
+
+# Starte Nginx als Hintergrundprozess
+nginx -g "daemon off;" &
+
+# Setze Gunicorn Worker-Anzahl (Standard: (2*CPUs)+1)
+WORKERS=${GUNICORN_WORKERS:-$((2 * $(nproc) + 1))}
+
+# Stelle sicher, dass Logs existieren
+mkdir -p /var/log/gunicorn
+touch /var/log/gunicorn/access.log /var/log/gunicorn/error.log
+
+# Starte Gunicorn als Hauptprozess
+exec gunicorn --workers="$WORKERS" konova.wsgi:application \
+    --bind=0.0.0.0:8000 \
+    --access-logfile /var/log/gunicorn/access.log \
+    --error-logfile /var/log/gunicorn/error.log \
+    --access-logformat '%({x-real-ip}i)s via %(h)s %(l)s %(u)s %(t)s "%(r)s" %(s)s %(b)s "%(f)s" "%(a)s"'

konova/sub_settings/django_settings.py

@@ -191,11 +191,10 @@ STATICFILES_DIRS = [
 ]
 
 # EMAIL (see https://docs.djangoproject.com/en/dev/topics/email/)
-
-# CHANGE_ME !!! ONLY FOR DEVELOPMENT !!!
 if DEBUG:
+    # ONLY FOR DEVELOPMENT NEEDED
     EMAIL_BACKEND = 'django.core.mail.backends.filebased.EmailBackend'
-    EMAIL_FILE_PATH = '/tmp/app-messages' # change this to a proper location
+    EMAIL_FILE_PATH = '/tmp/app-messages'
 
 DEFAULT_FROM_EMAIL = env("DEFAULT_FROM_EMAIL")  # The default email address for the 'from' element
 SERVER_EMAIL = DEFAULT_FROM_EMAIL  # The default email sender address, which is used by Django to send errors via mail

nginx.conf

@@ -0,0 +1,25 @@
+server {
+    listen 80;
+    client_max_body_size 25M;
+
+    location / {
+        proxy_pass http://127.0.0.1:8000;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header Host $host;
+        proxy_redirect off;
+        proxy_cache_bypass $http_upgrade;
+    }
+
+    location /static/ {
+        alias /konova/static/;
+        access_log /var/log/nginx/access.log;
+        autoindex off;
+        types {
+            text/css css;
+            application/javascript js;
+        }
+    }
+
+    error_log /var/log/nginx/error.log;
+}

requirements.txt

@@ -4,62 +4,62 @@ async-timeout==5.0.1
 beautifulsoup4==4.14.3
 billiard==4.2.4
 cached-property==2.0.1
-celery==5.6.3
-certifi==2026.4.22
+celery==5.6.2
+certifi==2026.2.25
 cffi==2.0.0
-chardet==7.4.3
-charset-normalizer==3.4.7
-click==8.3.3
+chardet==6.0.0.post1
+charset-normalizer==3.4.4
+click==8.3.1
 click-didyoumean==0.3.1
 click-plugins==1.1.1.2
 click-repl==0.3.0
-coverage==7.13.5
-cryptography==48.0.0
+coverage==7.13.4
+cryptography==46.0.5
 Deprecated==1.3.1
-Django==6.0.5
-django-autocomplete-light==4.0.0
+Django==6.0.2
+django-autocomplete-light==3.12.1
 django-bootstrap-modal-forms==3.0.5
 django-bootstrap4==26.1
 django-environ==0.13.0
 django-filter==25.2
 django-fontawesome-5==1.0.18
 django-oauth-toolkit==3.2.0
-django-tables2==3.0.0
+django-tables2==2.8.0
 et_xmlfile==2.0.0
-gunicorn==26.0.0
-idna==3.13
-importlib_metadata==9.0.0
+gunicorn==25.1.0
+idna==3.11
+importlib_metadata==8.7.1
 itsdangerous==2.2.0
-jwcrypto==1.5.7
+jwcrypto==1.5.6
 kombu==5.6.2
 oauthlib==3.3.1
 openpyxl==3.2.0b1
-packaging==26.2
-pika==1.4.0
-pillow==12.2.0
+packaging==26.0
+pika==1.3.2
+pillow==12.1.1
 prompt_toolkit==3.0.52
-psycopg==3.3.4
-psycopg-binary==3.3.4
+psycopg==3.3.3
+psycopg-binary==3.3.3
 pycparser==3.0
 pyparsing==3.3.2
 pypng==0.20220715.0
 pyproj==3.7.2
 python-dateutil==2.9.0.post0
-pytz==2026.2
+pytz==2025.2
 PyYAML==6.0.3
 qrcode==8.2
-redis==7.4.0
-requests==2.33.1
+redis==7.2.1
+requests==2.32.5
 six==1.17.0
 soupsieve==2.8.3
 sqlparse==0.5.5
 typing_extensions==4.15.0
-tzdata==2026.2
+tzdata==2025.3
 tzlocal==5.3.1
-urllib3==2.7.0
+urllib3==2.6.3
 vine==5.1.0
-wcwidth==0.7.0
+wcwidth==0.6.0
 webservices==0.7
-wrapt==2.1.2
+wrapt==2.1.1
 xmltodict==1.0.4
-zipp==3.23.1
+zipp==3.23.0

templates/generic_index.html

@@ -70,7 +70,7 @@
                         </div>
                         <div class="dropdown-menu dropdown-menu-right">
                             {% for rpp_option in table.results_per_page_choices %}
-                                <a class="dropdown-item {% if table.results_per_page_chosen == rpp_option %}selected{% endif %}" href="{% querystring %}&{{ table.results_per_page_parameter}}={{rpp_option }}">
+                                <a class="dropdown-item {% if table.results_per_page_chosen == rpp_option %}selected{% endif %}" href="{% querystring table.results_per_page_parameter=rpp_option %}">
                                     {{ rpp_option }}
                                 </a>
                             {% endfor %}