def _checklogin(request, *args, **kwargs): if (request.user.is_active and request.user.is_app_manager) or request.user.is_admin: # The user is valid. Continue to the admin page. return view_func(request, *args, **kwargs) assert hasattr(request, 'session'), "The Django admin requires session middleware to be installed. Edit your MIDDLEWARE_CLASSES setting to insert 'django.contrib.sessions.middleware.SessionMiddleware'." # If this isn't already the login page, display it. if LOGIN_FORM_KEY not in request.POST: if request.POST: message = _("Please log in again, because your session has expired.") else: message = "" return _display_login_form(request, message) # Check that the user accepts cookies. if not request.session.test_cookie_worked(): message = _("Looks like your browser isn't configured to accept cookies. Please enable cookies, reload this page, and try again.") return _display_login_form(request, message) else: request.session.delete_test_cookie() # Check the password. username = request.POST.get('username', None) password = request.POST.get('password', None) user = authenticate(username=username, password=password) if user is None: message = ERROR_MESSAGE if '@' in username: # Mistakenly entered e-mail address instead of username? Look it up. users = list(User.objects.filter(email=username)) if len(users) == 1 and users[0].check_password(password): message = _("Your e-mail address is not your username. Try '%s' instead.") % users[0].username return _display_login_form(request, message) # The user data is correct; log in the user in and continue. else: if (user.is_active and user.is_app_manager) or user.is_admin: login(request, user) return http.HttpResponseRedirect(request.get_full_path()) else: return _display_login_form(request, ERROR_MESSAGE)
def login(self, request): """ Displays the login form for the given HttpRequest. """ from hipercic.hipercore.authenticore.models import User # If this isn't already the login page, display it. if not request.POST.has_key(LOGIN_FORM_KEY): if request.POST: message = _("Please log in again, because your session has expired.") else: message = "" return self.display_login_form(request, message) # Check that the user accepts cookies. if not request.session.test_cookie_worked(): message = _("Looks like your browser isn't configured to accept cookies. Please enable cookies, reload this page, and try again.") return self.display_login_form(request, message) else: request.session.delete_test_cookie() # Check the password. username = request.POST.get('username', None) password = request.POST.get('password', None) user = authenticate(username=username, password=password) if user is None: message = ERROR_MESSAGE if username is not None and u'@' in username: # Mistakenly entered e-mail address instead of username? Look it up. try: user = User.objects.get(email=username) except (User.DoesNotExist, User.MultipleObjectsReturned): pass else: if user.check_password(password): message = _("Your e-mail address is not your username." " Try '%s' instead.") % user.username return self.display_login_form(request, message) # The user data is correct; log in the user in and continue. else: if user.is_active: login(request, user) if request.REQUEST.get('next', '') !='': got_to = request.REQUEST.get('next', '') elif request.get_full_path() == '/': print request.get_full_path() got_to= request.get_full_path() elif user.default_app != None: print "default_app" print user.default_app.name got_to = '/'+user.default_app.name+'/' #this may not be correct elif len(user.apps.values_list()) != 0:#user has perms to app redirect there appValuesListQuerySet = user.apps.values_list('name', flat=True) app = list(appValuesListQuerySet).pop(0) got_to= app else: got_to = 'home/' #change to home return http.HttpResponseRedirect(got_to) else: return self.display_login_form(request, ERROR_MESSAGE)