You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
30 lines
899 B
Python
30 lines
899 B
Python
|
|
# Copyright (C) 2018 Intel Corporation
|
|
#
|
|
# SPDX-License-Identifier: MIT
|
|
|
|
from django.conf import settings
|
|
from . import AUTH_ROLE
|
|
|
|
AUTH_LDAP_GROUPS = {
|
|
AUTH_ROLE.ADMIN: settings.AUTH_LDAP_ADMIN_GROUPS,
|
|
AUTH_ROLE.ANNOTATOR: settings.AUTH_LDAP_ANNOTATOR_GROUPS,
|
|
AUTH_ROLE.USER: settings.AUTH_LDAP_USER_GROUPS,
|
|
AUTH_ROLE.OBSERVER: settings.AUTH_LDAP_OBSERVER_GROUPS
|
|
}
|
|
|
|
def create_user(sender, user=None, ldap_user=None, **kwargs):
|
|
from django.contrib.auth.models import Group
|
|
user_groups = []
|
|
for role in AUTH_ROLE:
|
|
db_group = Group.objects.get(name=role)
|
|
|
|
for ldap_group in AUTH_LDAP_GROUPS[role]:
|
|
if ldap_group.lower() in ldap_user.group_dns:
|
|
user_groups.append(db_group)
|
|
if role == AUTH_ROLE.ADMIN:
|
|
user.is_staff = user.is_superuser = True
|
|
|
|
user.groups.set(user_groups)
|
|
user.save()
|