forked from Github-Mirrors/canaille
57 lines
1.3 KiB
Python
57 lines
1.3 KiB
Python
import ldap
|
|
from functools import wraps
|
|
from flask import session, abort
|
|
from canaille.models import User
|
|
|
|
|
|
def current_user():
|
|
if not session.get("user_dn"):
|
|
return None
|
|
|
|
if not isinstance(session.get("user_dn"), list):
|
|
del session["user_dn"]
|
|
return None
|
|
|
|
dn = session["user_dn"][-1]
|
|
try:
|
|
user = User.get(dn=dn)
|
|
except ldap.LDAPError:
|
|
return None
|
|
|
|
if not user:
|
|
try:
|
|
session["user_dn"] = session["user_dn"][:-1]
|
|
except IndexError:
|
|
del session["user_dn"]
|
|
|
|
return user
|
|
|
|
|
|
def user_needed():
|
|
def wrapper(view_function):
|
|
@wraps(view_function)
|
|
def decorator(*args, **kwargs):
|
|
user = current_user()
|
|
if not user:
|
|
abort(403)
|
|
return view_function(*args, user=user, **kwargs)
|
|
|
|
return decorator
|
|
|
|
return wrapper
|
|
|
|
|
|
def permissions_needed(*args):
|
|
permissions = set(args)
|
|
|
|
def wrapper(view_function):
|
|
@wraps(view_function)
|
|
def decorator(*args, **kwargs):
|
|
user = current_user()
|
|
if not user or not permissions.issubset(user.permissions):
|
|
abort(403)
|
|
return view_function(*args, user=user, **kwargs)
|
|
|
|
return decorator
|
|
|
|
return wrapper
|