добавил рабочие ссылки на просмотр списка аккаунтов и каждого отдельного аккаунта

This commit is contained in:
2024-01-18 19:23:04 +03:00
parent ed37bcbfc2
commit a611b1784d
7 changed files with 40 additions and 27 deletions

View File

@@ -46,7 +46,6 @@ class User(AbstractBaseUser):
permissions = {
'view_logs': 0,
'view_pump_stats': 1,
'change_users': 1,
'users.add_user': 1,
'users.change_user': 1,

View File

@@ -23,5 +23,7 @@ urlpatterns = [
path('login', views.view_login, name='login'),
path('logout', views.view_logout, name='logout'),
path('list', views.view_list, name='accounts-list'),
path('view', views.view_account, name='account-view'),
path('change-password', views.default_view, name='change-password'),
path('delete/<str:username>', views.default_view, name='delete-account'),
]

View File

@@ -1,6 +1,6 @@
import os
from django.http import HttpResponse, HttpResponseRedirect, HttpResponseBadRequest
from django.http import HttpResponse, HttpResponseRedirect, HttpResponseBadRequest, Http404
from django.shortcuts import render
# from django.db.models import Manager
from django.contrib.auth import authenticate, login, logout
@@ -9,7 +9,7 @@ from .models import User
from .forms import UserRegisterForm
def default_view(request):
def default_view(request, *args, **kwargs):
return HttpResponse('Not implemented!')
@@ -53,6 +53,20 @@ def view_login(request):
return HttpResponseBadRequest()
@login_required
def view_account(request):
view_user = request.user
if 'username' in request.GET:
if request.user.has_perm('users.view_user'):
try:
view_user = User.objects.get_by_natural_key(request.GET['username'])
except:
return Http404()
else:
raise PermissionError()
return render(request, 'account/view.html', {'view_user': view_user})
@login_required
@permission_required(perm='users.add_user', raise_exception=True)
def view_register(request):