Django - Anonymous user group -
i need allow administrators manage permissions models on site. groups, users, , permissions doing great job of right now. however, need allow administrators manage permissions of non-authenticated users - anonymous users. docs anonymous user's group empty, how can allow administration of permissions?
it strange add permissions anonymous users. docs say:
django's permission framework not have place store permissions anonymous users. however, has foundation allows custom authentication backends specify authorization anonymous users. useful authors of re-usable apps, can delegate questions of authorization auth backend, rather needing settings, example, control anonymous access.
so can set permissions anon yuser, custom auth backend. better use declarative permission check, using decorators on views needed permissions, like:
@permission_required('somemodel.can_add') def add_model(request):
or leave unrestricted everyone(incl. anonymous user). or custom permission check..
or if want have permissions anyway, can create dummy user, let's "anonuser", give permissions, , checking permissions have like:
if not user.is_authenticated(): dummy_user = user.objects.get(name="anonuser") if dummy_user.has_perm("somepermission"): # bla bla bla
but i'd never use..
Comments
Post a Comment