2iYddlmZddlmZddlmZddlmZddlm Z ddl m Z ddl m Z ddlmZdd lmZdd lmZdd Zd ZdZy ))apps)settings)REDIRECT_FIELD_NAME)Model) ModelBase)QuerySet)get_object_or_404wraps) GuardianError)get_40x_or_NoneNc 8|jdtj|jdt|jdd|jdd|jddt t s t dfd}|S) a Decorator for views that checks whether a user has a particular permission enabled. Optionally, instances for which check should be made may be passed as an second argument or as a tuple parameters same as those passed to ``get_object_or_404`` but must be provided as pairs of strings. This way decorator can fetch i.e. ``User`` instance based on performed request and check permissions on it (without this, one would need to fetch user instance at view's logic and check permission inside a view). :param login_url: if denied, user would be redirected to location set by this parameter. Defaults to ``django.conf.settings.LOGIN_URL``. :param redirect_field_name: name of the parameter passed if redirected. Defaults to ``django.contrib.auth.REDIRECT_FIELD_NAME``. :param return_403: if set to ``True`` then instead of redirecting to the login page, response with status code 403 is returned ( ``django.http.HttpResponseForbidden`` instance or rendered template - see :setting:`GUARDIAN_RENDER_403`). Defaults to ``False``. :param return_404: if set to ``True`` then instead of redirecting to the login page, response with status code 404 is returned ( ``django.http.HttpResponseNotFound`` instance or rendered template - see :setting:`GUARDIAN_RENDER_404`). Defaults to ``False``. :param accept_global_perms: if set to ``True``, then *object level permission* would be required **only if user does NOT have global permission** for target *model*. If turned on, makes this decorator like an extension over standard ``django.contrib.admin.decorators.permission_required`` as it would check for global permissions first. Defaults to ``False``. Examples:: @permission_required('auth.change_user', return_403=True) def my_view(request): return HttpResponse('Hello') @permission_required('auth.change_user', (User, 'username', 'username')) def my_view(request, username): ''' auth.change_user permission would be checked based on given 'username'. If view's parameter would be named ``name``, we would rather use following decorator:: @permission_required('auth.change_user', (User, 'username', 'name')) ''' user = get_object_or_404(User, username=username) return user.get_absolute_url() @permission_required('auth.change_user', (User, 'username', 'username', 'groups__name', 'group_name')) def my_view(request, username, group_name): ''' Similar to the above example, here however we also make sure that one of user's group is named same as request's ``group_name`` param. ''' user = get_object_or_404(User, username=username, group__name=group_name) return user.get_absolute_url() login_urlredirect_field_name return_403F return_404accept_global_permsz`First argument must be in format: 'app_label.codename or a callable which return similar string'c@fd}t|S)Nc Ld} r d dd}}t|tr=|jd}t|dk7r t dt j |}nAt|jtttfrnt d|dt|dt|dzdk7r t d i}t|ddd|dddD]\}} | |vrt d | z|| ||<!t|fi|}t|g|  } | r| S|g|i|S) Nr.zPIf model should be looked up from string it needs format: 'app_label.ModelClass'z_First lookup argument must always be a model, string pointing at app/model or queryset. Given: z (type: )zHLookup variables must be provided as pairs of lookup_string and view_argz-Argument %s was not passed into view function)permsobjrrrrr) isinstancestrsplitlenr r get_model issubclass __class__rrrtypezipr r )requestargskwargsrmodellookupssplitted lookup_dictlookupview_argresponserrlookup_variablespermrrr view_funcs J/var/www/html/acx/venv/lib/python3.12/site-packages/guardian/decorators.py _wrapped_viewz=permission_required..decorator.._wrapped_viewXsC!1!!46Fqr6JweS)${{3/H8})+-]^^ NNH5E%H1MN'BGe)VWWw.decoratorWs"$ 7$ 7J uY ..r4)popr LOGIN_URLrrrr ) r0r/r'r5rrrrrs `` @@@@@r2permission_requiredr8 sz ;(:(:;I **24L%0JL%0J **%:EB dC ]^ ^&/&/N r4c*d|d<t|g|i|S)a Simple wrapper for permission_required decorator. Standard Django's permission_required decorator redirects user to login page in case permission check failed. This decorator may be used to return HttpResponseForbidden (status 403) instead of redirection. The only difference between ``permission_required`` decorator is that this one always set ``return_403`` parameter to ``True``. Trr8r0r&r's r2permission_required_or_403r<# F< t 5d 5f 55r4c*d|d<t|g|i|S)a Simple wrapper for permission_required decorator. Standard Django's permission_required decorator redirects user to login page in case permission check failed. This decorator may be used to return HttpResponseNotFound (status 404) instead of redirection. The only difference between ``permission_required`` decorator is that this one always set ``return_404`` parameter to ``True``. Trr:r;s r2permission_required_or_404r?r=r4)N) django.appsr django.confrdjango.contrib.authrdjango.db.modelsrdjango.db.models.baserdjango.db.models.queryrdjango.shortcutsr django.utils.functionalr guardian.exceptionsr guardian.utilsr r8r<r?r4r2rKs4 3"++.)-*qh 6 6r4