django-roles-access / master Goto Github PK

Add to both model next generic fields:
• description (text)
• created (datetime)
• updated (datetime)

ViewAccess data model can add next fields:
#: Description for the view access restriction.

#: When view access was created.

#: When was the last update of the view access.

TemplateAccess data model can add next fields:
#: Description for the template tag restriction.

#: When template tag was created.

#: When was the last update of the template tag.

When creating a ViewAccess object, selection of a Group should be only required when “By Roles” type was selected.

checkviewaccess should output information with csv format so it can be imported by other tool.

Documentation proposed as starting point for BDD:

Output format

Is possible to export site’s view access in csv format with the next columns:

• App Name: Application name to which belong the view being reported.

• Type: ['None','NOT_SECURED', 'PUBLIC', 'SECURED']

• View Name: The name of the vie or blank.

• Url: The regex (django 1.10 and django 1.11) or pattern (django 2+)

• Status: Normal, Warning, Error.

• Status description: If there is a description for the state it should be reported here; eg cause of error or warning.

  python manage.py checkviewaccess --output-format csv

Make possible to filter access to views report by a list of roles or views.

Documentation proposed as starting point for BDD:

Roles security

It is also possible to use checkviewaccess using a role name (
:class:django.contrib.auth.models.Group name) for getting all views where
such role have access:

python manage.py checkviewaccess <role_name>

Views security

If in place of role name, checkviewaccess is used with a view name, It
will report the configured access to the view (configured with Django roles
tools):

python manage.py checkviewaccess <view_name>

Actually an application can have 4 type:

• Not Configured
• NOT_SECURED
• PUBLIC
• SECURED

Add a new type: ‘DISABLED’, with default behavior disabling all access to the views of the application.
An advantage could be, for example, install a new application and keep it “off-line” for a while.