如何使Django permission_required装饰器不将已登录的用户重定向到登录页面,而是显示一些消息

Question

如何使Django permission_required装饰器不将已登录的用户重定向到登录页面,但显示一些消息,如权限不足？

谢谢.

Answer 1

一个快速而肮脏的解决方案是编写自己的装饰器来执行此操作.像这样的东西:

decorator_with_arguments = lambda decorator: lambda *args, **kwargs: lambda func: decorator(func, *args, **kwargs)

@decorator_with_arguments
def custom_permission_required(function, perm):
    def _function(request, *args, **kwargs):
        if request.user.has_perm(perm):
            return function(request, *args, **kwargs)
        else:
            request.user.message_set.create(message = "What are you doing here?!")
            # Return a response or redirect to referrer or some page of your choice
    return _function

然后,您可以装饰您的视图:

@custom_permission_required('my_perm')
def my_view(request, *args, **kwargs):
    #Do stuff

Answer 2

由于django 1.4 permission_required具有一个raise_exception参数,您可以将其设置为True以引发未经授权的PermissionDenied异常

例如.给出一个基于类的视图的例子:

from django.contrib.auth.decorators import permission_required
...

class MyView(TemplateView):

    @method_decorator(permission_required('can_do_something', raise_exception=True))
    def dispatch(self, *args, **kwargs):
        return super(MyView, self).dispatch(*args, **kwargs)

参考:permission_required装饰者文档