Differential D3304
auth: Map Keycloak user permissions to Django ones Authored by anlambert on Jun 17 2020, 4:10 PM.
Details
This was the last task remaining to implement in order to close T2048. Keycloak user permissions are named Roles in Keycloak semantics. Extract them from each decoded access token and override methods from Closes T2247
Diff Detail
Event TimelineComment Actions Build is green Patch application report for D3304 (id=11707)Rebasing onto e926cadb92... Current branch diff-target is up to date. Changes applied before testcommit 7e719461588132fdaf854e20ccf244b83bc607da
Author: Antoine Lambert <antoine.lambert@inria.fr>
Date: Wed Jun 17 16:02:08 2020 +0200
auth: Map Keycloak user permissions to Django ones
Keycloak user permissions are named Roles in Keycloak semantics.
Extract them from each decoded access token and override methods from
django.contrib.auth.models.PermissionsMixin in order to manipulate them
as Django user permissions.
Closes T2247See https://jenkins.softwareheritage.org/job/DWAPPS/job/tests-on-diff/188/ for more details. Comment Actions I gather it's good (but some things may escape me). I'm missing a bit description what tests are testing, i suggested some docstrings. Cheers,
Comment Actions I have created T2458 for documenting users management with Keycloak, this should fill the blanks when it's done ;-)
Ack, will add test docstrings in a new commit. | ||||||||||||||||||||||||||