mirror of
https://github.com/ae-utbm/sith.git
synced 2024-12-22 15:51:19 +00:00
38 lines
1.3 KiB
Python
38 lines
1.3 KiB
Python
from __future__ import annotations
|
|
|
|
from typing import TYPE_CHECKING
|
|
|
|
from django.conf import settings
|
|
from django.contrib.auth.backends import ModelBackend
|
|
from django.contrib.auth.models import Permission
|
|
|
|
from core.models import Group
|
|
|
|
if TYPE_CHECKING:
|
|
from core.models import User
|
|
|
|
|
|
class SithModelBackend(ModelBackend):
|
|
"""Custom auth backend for the Sith.
|
|
|
|
In fact, it's the exact same backend as `django.contrib.auth.backend.ModelBackend`,
|
|
with the exception that group permissions are fetched slightly differently.
|
|
Indeed, django tries by default to fetch the permissions associated
|
|
with all the `django.contrib.auth.models.Group` of a user ;
|
|
however, our User model overrides that, so the actual linked group model
|
|
is [core.models.Group][].
|
|
Instead of having the relation `auth_perm --> auth_group <-- core_user`,
|
|
we have `auth_perm --> auth_group <-- core_group <-- core_user`.
|
|
|
|
Thus, this backend make the small tweaks necessary to make
|
|
our custom models interact with the django auth.
|
|
"""
|
|
|
|
def _get_group_permissions(self, user_obj: User):
|
|
groups = user_obj.groups.all()
|
|
if user_obj.is_subscribed:
|
|
groups = groups.union(
|
|
Group.objects.get(pk=settings.SITH_GROUP_SUBSCRIBERS_ID)
|
|
)
|
|
return Permission.objects.filter(group__group__in=groups)
|