app/django/contrib/auth/middleware.py
author Sverre Rabbelier <srabbelier@gmail.com>
Sat, 07 Feb 2009 20:37:28 +0000
changeset 1239 065e5bcf90f0
parent 54 03e267d67478
permissions -rw-r--r--
Stylefixes in access.py and removal of self.deny calls The result of self.deny() is not very helpfull to the user, as such we should not use it if we can provide a more sensible message. Also made the document access checks use getForKeyFieldsOr404 to prevent an error page when the specified document doesn't exist. Patch by: Sverre Rabbelier

class LazyUser(object):
    def __get__(self, request, obj_type=None):
        if not hasattr(request, '_cached_user'):
            from django.contrib.auth import get_user
            request._cached_user = get_user(request)
        return request._cached_user

class AuthenticationMiddleware(object):
    def process_request(self, request):
        assert hasattr(request, 'session'), "The Django authentication middleware requires session middleware to be installed. Edit your MIDDLEWARE_CLASSES setting to insert 'django.contrib.sessions.middleware.SessionMiddleware'."
        request.__class__.user = LazyUser()
        return None