← Back to branch summary

~canonical-django/canonical-django/project-template

« back to all changes in this revision

Viewing changes to trunk/python-packages/django/contrib/auth/handlers/modpython.py

  • Committer: Matthew Nuzum
  • Date: 2008-11-13 05:46:03 UTC
  • Revision ID: matthew.nuzum@canonical.com-20081113054603-v0kvr6z6xyexvqt3
adding to version control

Show diffs side-by-side

added added

removed removed

Lines of Context:
trunk/python-packages/django/contrib/auth/handlers/modpython.py
 
1
from mod_python import apache
 
2
import os
 
3
 
 
4
def authenhandler(req, **kwargs):
 
5
    """
 
6
    Authentication handler that checks against Django's auth database.
 
7
    """
 
8
 
 
9
    # mod_python fakes the environ, and thus doesn't process SetEnv.  This fixes
 
10
    # that so that the following import works
 
11
    os.environ.update(req.subprocess_env)
 
12
 
 
13
    # apache 2.2 requires a call to req.get_basic_auth_pw() before 
 
14
    # req.user and friends are available.
 
15
    req.get_basic_auth_pw()
 
16
 
 
17
    # check for PythonOptions
 
18
    _str_to_bool = lambda s: s.lower() in ('1', 'true', 'on', 'yes')
 
19
 
 
20
    options = req.get_options()
 
21
    permission_name = options.get('DjangoPermissionName', None)
 
22
    staff_only = _str_to_bool(options.get('DjangoRequireStaffStatus', "on"))
 
23
    superuser_only = _str_to_bool(options.get('DjangoRequireSuperuserStatus', "off"))
 
24
    settings_module = options.get('DJANGO_SETTINGS_MODULE', None)
 
25
    if settings_module:
 
26
        os.environ['DJANGO_SETTINGS_MODULE'] = settings_module
 
27
 
 
28
    from django.contrib.auth.models import User
 
29
    from django import db
 
30
    db.reset_queries()
 
31
 
 
32
    # check that the username is valid
 
33
    kwargs = {'username': req.user, 'is_active': True}
 
34
    if staff_only:
 
35
        kwargs['is_staff'] = True
 
36
    if superuser_only:
 
37
        kwargs['is_superuser'] = True
 
38
    try:
 
39
        try:
 
40
            user = User.objects.get(**kwargs)
 
41
        except User.DoesNotExist:
 
42
            return apache.HTTP_UNAUTHORIZED
 
43
    
 
44
        # check the password and any permission given
 
45
        if user.check_password(req.get_basic_auth_pw()):
 
46
            if permission_name:
 
47
                if user.has_perm(permission_name):
 
48
                    return apache.OK
 
49
                else:
 
50
                    return apache.HTTP_UNAUTHORIZED
 
51
            else:
 
52
                return apache.OK
 
53
        else:
 
54
            return apache.HTTP_UNAUTHORIZED
 
55
    finally:
 
56
        db.connection.close()