add: document template passwords for PDF exports

basxbread/contrib/document_templates/migrations/0008_documenttemplate_pdf_password.py

@@ -0,0 +1,23 @@
+# Generated by Django 4.1.7 on 2024-06-26 05:27
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("document_templates", "0007_alter_documenttemplatevariable_value"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="documenttemplate",
+            name="pdf_password",
+            field=models.CharField(
+                blank=True,
+                help_text="An optional password that will be set on generated PDFs",
+                max_length=2048,
+                verbose_name="PDF-Password",
+            ),
+        ),
+    ]

basxbread/contrib/document_templates/models.py

@@ -40,6 +40,13 @@ class DocumentTemplate(models.Model):
     filename_template = models.TextField(_("Filename template"), blank=True)
     filename_template.formfield_kwargs = {"widget": forms.Textarea(attrs={"rows": 1})}
 
+    pdf_password = models.CharField(
+        _("PDF-Password"),
+        blank=True,
+        max_length=2048,
+        help_text=_("An optional password that will be set on generated PDFs"),
+    )
+
     def default_context(self):
         return {"now": DateFormat(now())}
 
@@ -106,10 +113,14 @@ def generate_document_pdf(self, object):
                 file.write(content.read())
                 subprocess.run(  # nosec
                     [
-                        shutil.which("libreoffice")
+                        shutil.which("soffice")
                         or "false",  # statisfies mypy, since which may return None
                         "--convert-to",
-                        "pdf",
+                        (
+                            f'pdf:draw_pdf_Export:{{"EncryptFile":{{"type":"boolean","value":"true"}},"DocumentOpenPassword":{{"type":"string","value":"{self.pdf_password}"}}}}'
+                            if self.pdf_password
+                            else "pdf"
+                        ),
                         file.name,
                         "--outdir",
                         tmpdir,