Fix - Usuario no admin

This commit is contained in:
Mauricio Baeza 2017-12-03 23:47:41 -06:00
parent 6db103caba
commit 15a31d41f6
1 changed files with 7 additions and 0 deletions

View File

@ -33,12 +33,19 @@ def static(req, res):
class AuthMiddleware(object):
def process_resource(self, req, resp, resource, params):
session = req.env['beaker.session']
user = session.get('userobj', None)
id_session = req.cookies.get('beaker.session.id', '')
if req.path == '/empresas' or req.path == '/values/empresas':
if MV:
pass
else:
raise falcon.HTTPTemporaryRedirect('/')
elif id_session and req.path == '/admin':
if user is None:
raise falcon.HTTPTemporaryRedirect('/')
elif not user.es_admin or not user.es_superusuario:
raise falcon.HTTPTemporaryRedirect('/main')
elif not id_session and req.path != '/':
raise falcon.HTTPTemporaryRedirect('/')