summaryrefslogtreecommitdiff
path: root/postgresqleu/util/auth.py
blob: bdb5bd7d4163fa405a3fc09b84b2706d105f99f0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
from django.core.exceptions import PermissionDenied
from postgresqleu.util.middleware import RedirectException
from django.conf import settings

import urllib.parse


def authenticate_backend_group(request, groupname):
    if not request.user.is_authenticated:
        raise RedirectException("{0}?{1}".format(settings.LOGIN_URL, urllib.parse.urlencode({'next': request.build_absolute_uri()})))

    if request.user.is_superuser:
        return
    if request.user.groups.filter(name=groupname).exists():
        return

    raise PermissionDenied("Access denied")