Permission required decorator for django


Permission required decorator for django

My last issue today was to display an error message instead of redirecting to login page when the use doesn’t have permission. Here is a decorator which replace the permission_required of django. Feel free to rename it to avoid confusion

from django.shortcuts import render_to_response
from django.template.context import RequestContext
from django.contrib.auth import REDIRECT_FIELD_NAME
from django.utils.http import urlquote
from django.http import HttpResponseRedirect
from django.contrib.auth.models import Permission

class permission_required(object):
    """
    decorator which redirects to login page if user is anonymous
    and display a permission denied template if user is logged in
    doesn't have permission
    """
    def __init__(self,
                 perm,
                 login_url=None,
                 redirect_field_name=REDIRECT_FIELD_NAME,
                 template='permission_denied.html'):

        if not login_url:
            from django.conf import settings
            login_url = settings.LOGIN_URL

        self.perm = perm
        self.login_url = login_url
        self.redirect_field_name = redirect_field_name
        self.template = template

    def __call__(self, func):
        def wrap(request, *args, **kwargs):
            if request.user.is_anonymous():
                path = urlquote(request.get_full_path())
                tup = self.login_url, self.redirect_field_name, path
                return HttpResponseRedirect('%s?%s=%s' % tup)

            if request.user.has_perm(self.perm):
                return func(request, *args, **kwargs)

            (app_label, codename) = self.perm.split('.', 1)
            perm_name = Permission.objects.get(codename=codename,
                                               content_type__app_label=app_label)

            return render_to_response(self.template,
                                      {'perm': perm_name},
                                      context_instance=RequestContext(request))
        return wrap
My template permission_denied.html contains :
{% extends "base.html" %}
{% load i18n %}
{% block body %}
{% trans "Permission denied" %}
{% blocktrans with perm as perm %}You need to have the permission "{{ perm }}" to see this page{% endblocktrans %}
{% endblock %}

Comments

Popular Posts