878c703fd0
Before this patch, if user's rights were changed or revoked - there would be "Unauthorized" errors on every page since user had no rights to view them because he had no valid tokens in that case. Now user will be logged out if he has no valid tokens. Set `escalate` to True (for unauthorized-error) to always log user out. Also, now horizon.exceptions.NotAuthorized is a part of UNAUTHORIZED tuple in the exceptions.py, because this type of exception is re-raised after handling services unauthorized errors. Looks like it was missing. Now the horizon.exceptions.NotAuthorized is handled like all NotAuthorized exceptions. And horizon_middleware.py in process_exception now generates logout_reason for cases if user is not authorized. Closes-Bug: #1252341 Closes-Bug: #1407105 Co-Authored-By: Paul Karikh <pkarikh@mirantis.com> Change-Id: I417cad936ea80c0569c2f442fc87cbd58745757e |
||
---|---|---|
.. | ||
templates/overview | ||
__init__.py | ||
panel.py | ||
tests.py | ||
urls.py | ||
views.py |