如何允许超级用户访问 Django 管理面板

Question

我有以下用于自定义用户模型的代码。任何人都可以帮助我 限制超级用户访问管理站点的解决方案 。提前致谢

# UserManager is for Custom User Model to override Django's Default Model
class UserManager(BaseUserManager):
def _create_user(self, email, password, is_superuser, **extra_fields):
    if not email or not password:
        raise ValueError("The given username or password must not be null")
    user = self.model(
        email=email,
        password=password,
        is_superuser=is_superuser,
        last_login=now,
        **extra_fields
    )
    user.set_password(password)
    user.save(using=self._db)
    return user

    def create_user(self, email, password=None, **extra_fields):
        return self._create_user(email, password, False, **extra_fields)

    def create_superuser(self, email, password=None, **extra_fields):
        return self._create_user(email, password, True, **extra_fields)


    class Users(AbstractBaseUser):
email = models.EmailField(max_length=255, unique=True)
is_active = models.BooleanField(default=True)
is_admin = models.BooleanField(default=False)
is_superuser = models.BooleanField(default=False)
created_at_utc = models.DateTimeField(auto_now_add=True)

objects = UserManager()

USERNAME_FIELD = 'email'
REQUIRED_FIELDS = ['password']
def __str__(self):
    return self.email

def has_perm(self, perm, obj=None):
    "Does the user have a specific permission?"
    # Simplest possible answer: Yes, always
    return True

def has_module_perms(self, app_label):
    "Does the user have permissions to view the app `app_label`?"
    # Simplest possible answer: Yes, always
    return self.is_admin

def is_staff(self):
    "Is the user a member of staff?"
    # Simplest possible answer: All admins are staff
    return self.is_admin

class Meta:
    db_table = "users"

我有上面的用户代码，并按照管理面板的代码来创建和更新用户的谁能帮我出一个 限制超级用户访问管理站点的解决方案 。提前致谢

class UserCreateForm(UserCreationForm):
    class Meta:
        model = Users
        fields = (
            "email","is_admin","is_superuser",
        )


class UserChangeForm(BaseUserChangeForm):
    class Meta:
        model = Users
        fields = (
            "email","is_admin",
        )


class UserAdmin(BaseAdmin):
    form = UserChangeForm
    add_form = UserCreateForm

    fieldsets = (
        (None, {"fields": ("email", "password","is_active","is_admin","is_superuser")}),
    )

    add_fieldsets = (
        (None, {
            "classes": ("wide",),
            "fields": ("email", "password1", "password2","is_active","is_admin","is_superuser")}
        ),
    )
    filter_horizontal = ()

    list_display = ("email","is_active", )       
    list_filter = ("is_active", )    
    search_fields = ("email",)       
    ordering = ("email",)

# Register your models here.
admin.site.register(Users, UserAdmin)

我已经尝试了很多解决方案来限制只有超级用户才能在提供登录详细信息时访问管理页面。谁能帮我出一个 限制超级用户访问管理站点的解决方案 。提前致谢

Answer 1

我认为您要查找的字段是 is_staff，它位于

class AbstractUser(AbstractBaseUser, PermissionsMixin):

您可以从

导入此用户

from django.contrib.auth.models import AbstractUser

你会发现它有一个名为 is_staff 的字段，所以这基本上是一个布尔字段，用于确定用户是否有权登录管理站点，有关更多信息，请访问 google搜索或查找以下文章

https://www.webforefront.com/django/adminpermissions.html

我看到您创建了函数作为 def is_staff(self): 但您没有使用字段 is_staff

Answer 2

有同样的问题。将 password=None 改为 password。并将 password=password 与 username=username:

一起传递到 create_user 函数中，如下所示

class MyAccountManager(BaseUserManager):
    def create_user(self, email, username, password):
        if not email:
            raise ValueError('Please add an email address')
        if not username:
            raise ValueError('Please add an username')

        user = self.model(email=self.normalize_email(
            email), username=username, password=password)

        user.set_password(password)
        user.save(using=self._db)
        return user

    def create_superuser(self, email, username, password):
        user = self.create_user(email=self.normalize_email(
            email), username=username, password=password)

        user.is_active = True
        user.is_admin = True
        user.is_staff = True
        user.is_superuser = True
        user.save(using=self._db)
        return user

希望对你有用

如何允许超级用户访问 Django 管理面板

How to Allow Superusers to access Django Admin Panels

django

django-admin

python-3.x

django-advanced-filters