entrouvert
/
django-mellon
17
0
Fork 0
Code Issues Pull Requests Releases Activity

views: save is_staff in session

This commit is contained in:
Valentin Deniaud 2019-04-24 11:41:09 +02:00
parent 2aae735841
commit 12a5327367
3 changed files with 26 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
mellon/adapters.py
View File

@ -182,25 +182,12 @@ class DefaultAdapter(object):
user.save()
def provision_superuser(self, user, idp, saml_attributes):
superuser_mapping = utils.get_setting(idp, 'SUPERUSER_MAPPING')
if not superuser_mapping:
return
for key, values in superuser_mapping.items():
if key in saml_attributes:
if not isinstance(values, (tuple, list)):
values = [values]
values = set(values)
attribute_values = saml_attributes[key]
if not isinstance(attribute_values, (tuple, list)):
attribute_values = [attribute_values]
attribute_values = set(attribute_values)
if attribute_values & values:
if not (user.is_staff and user.is_superuser):
user.is_staff = True
user.is_superuser = True
user.save()
self.logger.info('flag is_staff and is_superuser added to user %s', user)
break
if utils.has_superuser_flag(idp, saml_attributes):
if not (user.is_staff and user.is_superuser):
user.is_staff = True
user.is_superuser = True
user.save()
self.logger.info('flag is_staff and is_superuser added to user %s', user)
else:
self.remove_superuser(user)

18
mellon/utils.py
View File

@ -271,3 +271,21 @@ def get_local_path(request, url):
if request.META.get('SCRIPT_NAME'):
path = path[len(request.META['SCRIPT_NAME']):]
return path
def has_superuser_flag(idp, saml_attributes):
superuser_mapping = get_setting(idp, 'SUPERUSER_MAPPING')
if not superuser_mapping:
return False
for key, values in superuser_mapping.items():
if key in saml_attributes:
if not isinstance(values, (tuple, list)):
values = [values]
values = set(values)
attribute_values = saml_attributes[key]
if not isinstance(attribute_values, (tuple, list)):
attribute_values = [attribute_values]
attribute_values = set(attribute_values)
if attribute_values & values:
return True
return False

2
mellon/views.py
View File

@ -218,6 +218,8 @@ class LoginView(ProfileMixin, LogMixin, View):
if user is not None:
if user.is_active:
utils.login(request, user)
idp = self.get_idp(request)
request.session['is_staff'] = utils.has_superuser_flag(idp, attributes)
self.log.info('user %s (NameID is %r) logged in using SAML', user,
attributes['name_id_content'])
request.session['mellon_session'] = utils.flatten_datetime(attributes)