c339189b44
Switch to using the self-contained django_openstack_auth
package which is a proper django.contrib.auth pluggable
backend.
Notable functional improvements include:
* Better overall security via use of standard Django
auth code (well-vetted by security experts).
* Token expiration checking.
* User "enabled" attribute checking.
* Support for full range of Django auth attributes
such as is_anonymous, is_active, is_superuser, etc.
* Improved hooks for RBAC/permission-based acess control.
Regarding the RBAC/permission-based access control, this
patch moves all "role" and "service"-oriented checks to
permission checks. This will make transitioning to
policy-driven checking much easier once that fully lands
in OpenStack.
Implements blueprint move-keystone-support-to-django-auth-backend
Change-Id: I4f3112af797aff8c4c5e9930c6ca33a70e45589d
45 lines
1.4 KiB
Python
45 lines
1.4 KiB
Python
# vim: tabstop=4 shiftwidth=4 softtabstop=4
|
|
|
|
# Copyright 2012 United States Government as represented by the
|
|
# Administrator of the National Aeronautics and Space Administration.
|
|
# All Rights Reserved.
|
|
#
|
|
# Copyright 2012 Nebula, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
"""
|
|
Views for home page.
|
|
"""
|
|
from django import shortcuts
|
|
from django.views.decorators import vary
|
|
|
|
import horizon
|
|
from openstack_auth.views import Login
|
|
|
|
|
|
def user_home(user):
|
|
if user.is_superuser:
|
|
return horizon.get_dashboard('syspanel').get_absolute_url()
|
|
return horizon.get_dashboard('nova').get_absolute_url()
|
|
|
|
|
|
@vary.vary_on_cookie
|
|
def splash(request):
|
|
if request.user.is_authenticated():
|
|
return shortcuts.redirect(user_home(request.user))
|
|
form = Login(request)
|
|
request.session.clear()
|
|
request.session.set_test_cookie()
|
|
return shortcuts.render(request, 'splash.html', {'form': form})
|