Django用户认证系统组与权限(一)

from django.contrib.auth.models import User
...
class UserProfile(models.Model):
    user = models.OneToOneField(User,on_delete=models.CASCADE)
    ...

User.objects.create_user(username="cox", password="cox123456")

from django.contrib.auth.models import AbstractUser
...
class UserProfile(AbstractUser):
    age = models.CharField(max_length=16)
    ...

AUTH_USER_MODEL = 'app名.UserProfile'

from django.contrib.auth import authenticate
...
user = authenticate(username=username, password=password)
# 认证用户的密码是否有效, 若有效则返回代表该用户的user对象, 若无效则返回None
# 需要注意的是：该方法不检查 is_active 标志位

AUTHENTICATION_BACKENDS = (
    'apps.User.utils.mycustombackend.custombackend.CustomBackend',
)

from django.contrib.auth.backends import ModelBackend
from django.db.models import Q
from User import models


class CustomBackend(ModelBackend):
    """
    自定义用户验证规则,输入用户名/邮箱均可
    """
    def authenticate(self, username=None, password=None, **kwargs):
        try:
            user = models.UserProfile.objects.get(Q(username=username)|Q(email=username))
            if user.check_password(password):
                return user
        except Exception as e:
            print("用户登录验证异常except:", e)
            return None

user.set_password(new_password)

from django.contrib.auth import login
...
login(request, user)
# 在auth/__init__.py中可以看到login的源代码

from django.contrib.auth import logout
...
logout(request)

from django.contrib.auth.models import Group

group = Group.objects.create(name=group_name) # 添加权限组
group.save()
---
group = Group.objects.get(name=group_name) # 删除权限组
group.delete() 

user.groups.add(group)
或者
group.user_set.add(user)

user.groups.remove(group)
或者
group.user_set.remove(user)

user.groups.clear()

group.user_set.clear()

user.has_perm('blog.add_article')
# 若拥有权限则返回True

user.user_permissions.add(permission)

user.user_permissions.delete(permission)

user.user_permissions.clear()

group.permissions.add(permission)

group.permissions.delete(permission)

group.permissions.clear()

class Discussion(models.Model):
  ...
  class Meta:
      permissions = (
          ("create_discussion", "Can create a discussion"),
          ("reply_discussion", "Can reply discussion"),
      )

user.has_perm('app名.create_discussion')