58 lines
1.7 KiB
Python
58 lines
1.7 KiB
Python
from django.contrib.auth.mixins import LoginRequiredMixin
|
|
from django.contrib.auth import views as auth_views
|
|
from django.urls import reverse_lazy, resolve
|
|
from django.utils.translation import gettext_lazy as _
|
|
from django.shortcuts import redirect
|
|
from django.http import Http404
|
|
from django.core.exceptions import PermissionDenied
|
|
|
|
|
|
|
|
class Http403(PermissionDenied):
|
|
status_code = 403
|
|
default_detail = _('Permission denied. User is not authenticated')
|
|
default_code = 'forbidden'
|
|
|
|
def __init__(self, detail=None, code=None):
|
|
if detail is not None:
|
|
self.detail = details or self.default_details
|
|
if code is not None:
|
|
self.code = code or self.default_code
|
|
|
|
|
|
class UserView(LoginRequiredMixin):
|
|
login_url = "/login/"
|
|
wallet = False
|
|
|
|
def get_context_data(self, **kwargs):
|
|
context = super().get_context_data(**kwargs)
|
|
context.update({
|
|
'title': self.title,
|
|
'subtitle': self.subtitle,
|
|
'icon': self.icon,
|
|
'section': self.section,
|
|
'path': resolve(self.request.path).url_name,
|
|
'user': self.request.user,
|
|
'wallet': self.wallet,
|
|
})
|
|
return context
|
|
|
|
|
|
class AdminView(UserView):
|
|
|
|
def get(self, request, *args, **kwargs):
|
|
self.check_valid_user()
|
|
return super().get(request, *args, **kwargs)
|
|
|
|
def post(self, request, *args, **kwargs):
|
|
self.check_valid_user()
|
|
return super().post(request, *args, **kwargs)
|
|
|
|
def check_valid_user(self):
|
|
if not self.request.user.is_admin:
|
|
raise Http403
|
|
|
|
if self.request.session.get("2fauth"):
|
|
raise Http403
|
|
|