canaille-globuzma/canaille/flaskutils.py

import ldap
from functools import wraps
from flask import session, abort
from canaille.models import User


def current_user():
    if "user_dn" not in session:
        return None

    user = User.get(dn=session["user_dn"])

    if not user:
        del session["user_dn"]

    return user


def user_needed():
    def wrapper(view_function):
        @wraps(view_function)
        def decorator(*args, **kwargs):
            user = current_user()
            if not user:
                abort(403)
            return view_function(*args, user=user, **kwargs)

        return decorator

    return wrapper


def moderator_needed():
    def wrapper(view_function):
        @wraps(view_function)
        def decorator(*args, **kwargs):
            user = current_user()
            if not user or not user.moderator:
                abort(403)
            return view_function(*args, user=user, **kwargs)

        return decorator

    return wrapper


def admin_needed():
    def wrapper(view_function):
        @wraps(view_function)
        def decorator(*args, **kwargs):
            user = current_user()
            if not user or not user.admin:
                abort(403)
            return view_function(*args, user=user, **kwargs)

        return decorator

    return wrapper