diff options
Diffstat (limited to 'ishtar/ishtar_base/backend.py')
| -rw-r--r-- | ishtar/ishtar_base/backend.py | 62 | 
1 files changed, 0 insertions, 62 deletions
diff --git a/ishtar/ishtar_base/backend.py b/ishtar/ishtar_base/backend.py deleted file mode 100644 index f50edd708..000000000 --- a/ishtar/ishtar_base/backend.py +++ /dev/null @@ -1,62 +0,0 @@ -#!/usr/bin/env python -# -*- coding: utf-8 -*- -# Copyright (C) 2010-2011 Étienne Loks  <etienne.loks_AT_peacefrogsDOTnet> - -# This program is free software: you can redistribute it and/or modify -# it under the terms of the GNU Affero General Public License as -# published by the Free Software Foundation, either version 3 of the -# License, or (at your option) any later version. - -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the -# GNU Affero General Public License for more details. - -# You should have received a copy of the GNU Affero General Public License -# along with this program.  If not, see <http://www.gnu.org/licenses/>. - -# See the file COPYING for details. - -""" -Permission backend to manage "own" objects -""" - -from django.conf import settings -from django.contrib.auth.models import User -from django.core.exceptions import ObjectDoesNotExist - -import models - -class ObjectOwnPermBackend(object): -    supports_object_permissions = True -    supports_anonymous_user = True - -    def authenticate(self, username, password): -        # managed by the default backend -        return None - -    def has_perm(self, user_obj, perm, model=None, obj=None): -        if not user_obj.is_authenticated(): -            return False -        if not model: -            # let it manage by the default backend -            return False -        try: -            ishtar_user = models.IshtarUser.objects.get(user_ptr=user_obj) -        except ObjectDoesNotExist: -            return False -        try: -            # only manage "own" permissions -            assert perm.split('.')[-1].split('_')[1] == 'own' -        except (IndexError, AssertionError): -            return False -        if ishtar_user.person.person_type \ -           == models.PersonType.objects.get(txt_idx="administrator"): -            return True -        if obj is None: -            model_name = perm.split('_')[-1].capitalize() -            if not hasattr(models, model_name): -                return False -            model = getattr(models, model_name) -            return user_obj.has_perm(perm) and model.has_item_of(ishtar_user) -        return user_obj.has_perm(perm) and obj.is_own(user_obj)  | 
