Auth decorators with 403

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
from django.contrib.auth import REDIRECT_FIELD_NAME
from django.shortcuts import render_to_response
from django.template import RequestContext

def user_passes_test_with_403(test_func, login_url=None):
    """
    Decorator for views that checks that the user passes the given test.
    
    Anonymous users will be redirected to login_url, while users that fail
    the test will be given a 403 error.
    """
    if not login_url:
        from django.conf import settings
        login_url = settings.LOGIN_URL
    def _dec(view_func):
        def _checklogin(request, *args, **kwargs):
            if test_func(request.user):
                return view_func(request, *args, **kwargs)
            elif not request.user.is_authenticated():
                return HttpResponseRedirect('%s?%s=%s' % (login_url, REDIRECT_FIELD_NAME, quote(request.get_full_path())))
            else:
                resp = render_to_response('403.html', context_instance=RequestContext(request))
                resp.status_code = 403
                return resp
        _checklogin.__doc__ = view_func.__doc__
        _checklogin.__dict__ = view_func.__dict__
        return _checklogin
    return _dec

def permission_required_with_403(perm, login_url=None):
    """
    Decorator for views that checks whether a user has a particular permission
    enabled, redirecting to the log-in page or rendering a 403 as necessary.
    """
    return user_passes_test_with_403(lambda u: u.has_perm(perm), login_url=login_url)

More like this

  1. Decorator for authenticating token based API calls by jpulgarin 3 years, 3 months ago
  2. anonymous_required decorator by yetty 9 months, 3 weeks ago
  3. Show logged users - keeping track of users login and logout by albertorcf 1 year, 7 months ago
  4. Google AppEngine Login Decorator by cmcavoy 6 years ago
  5. Require login across entire site by SuperJared 7 years ago

Comments

jerry2801 (on October 19, 2009):

""" AttributeError: 'function' object has no attribute 'has_header' """ why?

#

jerry2801 (on October 19, 2009):

""" _dec() takes exactly 1 argument (2 given) """

when i push @permission_required_with_403 to another view function, show above error, why?

#

jerry2801 (on October 19, 2009):

i'm sorry, is my wrong! i miss the param for perm

@permission_required_with_403('is_staff')

can i use this perm? "is_staff", i think is useful, however, django is not support it. like this: @permission_required('is_staff')

Look forward to your answers

#

(Forgotten your password?)