django-roles-access / master Goto Github PK

Add to both model next generic fields:
• description (text)
• created (datetime)
• updated (datetime)

ViewAccess data model can add next fields:
#: Description for the view access restriction.

#: When view access was created.

#: When was the last update of the view access.

TemplateAccess data model can add next fields:
#: Description for the template tag restriction.

#: When template tag was created.

#: When was the last update of the template tag.

When creating a ViewAccess object, selection of a Group should be only required when “By Roles” type was selected.

Actually an application can have 4 type:

• Not Configured
• NOT_SECURED
• PUBLIC
• SECURED

Add a new type: ‘DISABLED’, with default behavior disabling all access to the views of the application.
An advantage could be, for example, install a new application and keep it “off-line” for a while.

checkviewaccess should output information with csv format so it can be imported by other tool.

Documentation proposed as starting point for BDD:

Output format

Is possible to export site’s view access in csv format with the next columns:

• App Name: Application name to which belong the view being reported.

• Type: ['None','NOT_SECURED', 'PUBLIC', 'SECURED']

• View Name: The name of the vie or blank.

• Url: The regex (django 1.10 and django 1.11) or pattern (django 2+)

• Status: Normal, Warning, Error.

• Status description: If there is a description for the state it should be reported here; eg cause of error or warning.

  python manage.py checkviewaccess --output-format csv

Make possible to filter access to views report by a list of roles or views.

Documentation proposed as starting point for BDD:

Roles security

It is also possible to use checkviewaccess using a role name (
:class:django.contrib.auth.models.Group name) for getting all views where
such role have access:

python manage.py checkviewaccess <role_name>

Views security

If in place of role name, checkviewaccess is used with a view name, It
will report the configured access to the view (configured with Django roles
tools):

python manage.py checkviewaccess <view_name>