如何将视图限制为仅超级用户？ [英] How to limit a view to superuser only?

问题描述

view.py

@login_required
@permission_required('is_superuser')
def score_reset(request):
   pass

url.py

url(r'^score-reset/$', score_reset, name='score-reset'),    

我有以下代码，令我惊讶的是，即使使用非超级用户。

I have the following code and to my surprise I still hit the function, despite being logged in with a non superuser. I was expecting to get a permission denied.

我缺少什么？

推荐答案

is_superuser 不是权限，它是用户模型上的属性。 Django已经有另一个装饰器，您可以使用 user_passes_test 执行此检查：

is_superuser isn't a permission, it's an attribute on the user model. Django already has another decorator you can make use of called user_passes_test to perform this check:

from django.contrib.auth.decorators import user_passes_test

@user_passes_test(lambda u: u.is_superuser)
def score_reset(self,...):
    ...

• 仅允许超级用户登录


• Django is_staff权限装饰器


• allowing only super user login
• Django is_staff permission decorator

这篇关于如何将视图限制为仅超级用户？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！