增加/admin/和/api/admin/的权限控制middleware

This commit is contained in:
virusdefender 2015-08-09 12:57:13 +08:00
parent d7030adc2c
commit f7b6a354b3

16
admin/middleware.py Normal file
View File

@ -0,0 +1,16 @@
# coding=utf-8
import json
from django.http import HttpResponse, HttpResponseRedirect
class AdminRequiredMiddleware(object):
def process_request(self, request):
path = request.path_info
if path.startswith("/admin/") or path.startswith("/api/admin/"):
if not request.user.is_authenticated():
if request.is_ajax():
return HttpResponse(json.dumps({"code": 1, "data": u"请先登录"}),
content_type="application/json")
else:
return HttpResponseRedirect("/login/")