151bd13666
* Generate common/djangoapps import shims for LMS * Generate common/djangoapps import shims for Studio * Stop appending project root to sys.path * Stop appending common/djangoapps to sys.path * Import from common.djangoapps.course_action_state instead of course_action_state * Import from common.djangoapps.course_modes instead of course_modes * Import from common.djangoapps.database_fixups instead of database_fixups * Import from common.djangoapps.edxmako instead of edxmako * Import from common.djangoapps.entitlements instead of entitlements * Import from common.djangoapps.pipline_mako instead of pipeline_mako * Import from common.djangoapps.static_replace instead of static_replace * Import from common.djangoapps.student instead of student * Import from common.djangoapps.terrain instead of terrain * Import from common.djangoapps.third_party_auth instead of third_party_auth * Import from common.djangoapps.track instead of track * Import from common.djangoapps.util instead of util * Import from common.djangoapps.xblock_django instead of xblock_django * Add empty common/djangoapps/__init__.py to fix pytest collection * Fix pylint formatting violations * Exclude import_shims/ directory tree from linting
42 lines
1.6 KiB
Python
42 lines
1.6 KiB
Python
"""
|
|
Middleware that checks user standing for the purpose of keeping users with
|
|
disabled accounts from accessing the site.
|
|
"""
|
|
|
|
|
|
from django.conf import settings
|
|
from django.http import HttpResponseForbidden
|
|
from django.utils.deprecation import MiddlewareMixin
|
|
from django.utils.translation import ugettext as _
|
|
|
|
from openedx.core.djangolib.markup import HTML, Text
|
|
from common.djangoapps.student.models import UserStanding
|
|
|
|
|
|
class UserStandingMiddleware(MiddlewareMixin):
|
|
"""
|
|
Checks a user's standing on request. Returns a 403 if the user's
|
|
status is 'disabled'.
|
|
"""
|
|
def process_request(self, request):
|
|
user = request.user
|
|
try:
|
|
user_account = UserStanding.objects.get(user=user.id)
|
|
# because user is a unique field in UserStanding, there will either be
|
|
# one or zero user_accounts associated with a UserStanding
|
|
except UserStanding.DoesNotExist:
|
|
pass
|
|
else:
|
|
if user_account.account_status == UserStanding.ACCOUNT_DISABLED:
|
|
msg = Text(_(
|
|
'Your account has been disabled. If you believe '
|
|
'this was done in error, please contact us at '
|
|
'{support_email}'
|
|
)).format(
|
|
support_email=HTML(u'<a href="mailto:{address}?subject={subject_line}">{address}</a>').format(
|
|
address=settings.DEFAULT_FEEDBACK_EMAIL,
|
|
subject_line=_('Disabled Account'),
|
|
),
|
|
)
|
|
return HttpResponseForbidden(msg)
|