authentik/passbook/core/views/access.py

"""passbook access helper classes"""
from django.contrib import messages
from django.utils.translation import gettext as _
from structlog import get_logger

from passbook.core.models import Application
from passbook.policy.engine import PolicyEngine

LOGGER = get_logger()

class AccessMixin:
    """Mixin class for usage in Authorization views.
    Provider functions to check application access, etc"""

    # request is set by view but since this Mixin has no base class
    request = None

    def provider_to_application(self, provider):
        """Lookup application assigned to provider, throw error if no application assigned"""
        try:
            return provider.application
        except Application.DoesNotExist as exc:
            messages.error(self.request, _('Provider "%(name)s" has no application assigned' % {
                'name': provider
                }))
            raise exc

    def user_has_access(self, application, user):
        """Check if user has access to application."""
        LOGGER.debug("Checking permissions of %s on application %s...", user, application)
        policy_engine = PolicyEngine(application.policies.all())
        policy_engine.for_user(user).with_request(self.request).build()
        return policy_engine.result