def login(self, *args, **kwargs):
if self.request.method == 'POST':
if 'username' in self.request.params:
username = self.request.params['username']
password = self.request.params['password']
u = User.by_username(username)
if u and u.validate_password(password):
session['user'] = u
session.save()
return redirect("/admin")
else:
return html_render()
return html_render()
def admin(self, *args, **kwargs):
user = session['user']
c.permissions = user.permissions
return html_render(user=user)
def home(self, *args, **kwargs):
return html_render()
