| """Module for admin access.""" |
|
|
| from __future__ import annotations |
|
|
| from typing import Any |
|
|
| from django.http import HttpRequest |
|
|
| from apps.core.exceptions import PermissionDenied |
|
|
|
|
| def get_request_user(request: HttpRequest) -> Any | None: |
| user = getattr(request, "user", None) |
| if user and getattr(user, "is_authenticated", False): |
| return user |
| return getattr(request, "auth", None) |
|
|
|
|
| def is_admin_user(user: Any | None) -> bool: |
| return bool( |
| user |
| and ( |
| getattr(user, "is_admin", False) or getattr(user, "is_superuser", False) or getattr(user, "is_staff", False) |
| ) |
| ) |
|
|
|
|
| def ensure_admin_request( |
| request: HttpRequest, |
| *, |
| message: str = "无权限执行该操作", |
| code: str = "PERMISSION_DENIED", |
| ) -> None: |
| if is_admin_user(get_request_user(request)): |
| return |
| raise PermissionDenied(message=message, code=code) |
|
|
