def su_view(request, next_page=None, redirect_field_name=REDIRECT_FIELD_NAME):
form = SuForm(request.POST)
if not form.is_valid():
return TemplateResponse(
request,
'simple-centered-form.html',
{
'form': form,
'action': reverse('su'),
'title': _("Login as another user"),
},
)
user = form.cleaned_data['user']
if is_under_su(request):
raise SuspiciousOperation
su_to_user(request, user, form.cleaned_data['backend'])
if redirect_field_name in request.GET:
next_page = request.GET[redirect_field_name]
elif redirect_field_name in request.POST:
next_page = request.POST[redirect_field_name]
request.session[REDIRECTION_AFTER_SU_KEY] = 'PRE_SU'
return safe_redirect(request, next_page)
def test_inheriting_backend(self):
test_user = User.objects.get(username='******')
test_user2 = User.objects.get(username='******')
factory = RequestFactory()
request = factory.get('/su')
request.user = get_user(request, test_user.id,
'oioioi.base.tests.IgnorePasswordAuthBackend')
request.session = {}
su_to_user(request, test_user2)
self.assertEquals('test_user2', request.user.username)
self.assertEquals('oioioi.base.tests.IgnorePasswordAuthBackend',
request.user.backend)
def test_inheriting_backend(self):
test_user = User.objects.get(username='******')
test_user2 = User.objects.get(username='******')
factory = RequestFactory()
request = factory.get('/su')
request.user = get_user(request, test_user.id,
'oioioi.base.tests.IgnorePasswordAuthBackend')
request.session = {}
su_to_user(request, test_user2)
self.assertEqual('test_user2', request.user.username)
self.assertEqual('oioioi.base.tests.IgnorePasswordAuthBackend',
request.user.backend)
def su_view(request, next_page=None, redirect_field_name=REDIRECT_FIELD_NAME):
form = SuForm(request.POST)
if not form.is_valid():
return TemplateResponse(request, 'simple-centered-form.html',
{'form': form, 'action': reverse('su'),
'title': _("Login as another user")})
user = form.cleaned_data['user']
if user.is_superuser or is_under_su(request):
raise SuspiciousOperation
su_to_user(request, user, form.cleaned_data['backend'])
if redirect_field_name in request.REQUEST:
next_page = request.REQUEST[redirect_field_name]
return safe_redirect(request, next_page)
