python - Hide Flask-Admin route -


i'm building flask blog , setting admin interface now. i've read setting security flask-admin. i've managed set security (access restricted logged-in users) models, users can still access '/admin' route has bare home button in it.

my question is: there way hide or protect '/admin' route, unauthenticated user redirected login page/ denied access?

thanks lot!

attaching current admin setup:

from flask_admin import admin flask_login import current_user flask_admin.contrib import sqla wtforms.widgets import textarea wtforms import textareafield samo.models import user, post, tag samo import app,db  admin = admin(app, name='admin', template_mode='bootstrap3')  class cktextareawidget(textarea):     def __call__(self, field, **kwargs):         if kwargs.get('class'):             kwargs['class'] += ' ckeditor'         else:             kwargs.setdefault('class', 'ckeditor')         return super(cktextareawidget, self).__call__(field, **kwargs)        class cktextareafield(textareafield):     widget = cktextareawidget()  class postadmin(sqla.modelview):     form_overrides = dict(content=cktextareafield)     create_template = 'blog/ckeditor.html'     edit_template = 'blog/ckeditor.html'     form_excluded_columns = ('slug')         def is_accessible(self):         return current_user.is_authenticated admin.add_view(postadmin(post, db.session))  class tagadmin(sqla.modelview):     def is_accessible(self):         return current_user.is_authenticated admin.add_view(tagadmin(tag, db.session))  class useradmin(sqla.modelview):     def is_accessible(self):         return current_user.is_authenticated admin.add_view(useradmin(user, db.session))

i use such configuration described websites. use adminindexview. here example of how handle login, logout , redirection in case user not authorized.

class flaskyadminindexview(adminindexview):      @expose('/')     def index(self):         if not login.current_user.is_authenticated:             return redirect(url_for('.login'))         return super(flaskyadminindexview, self).index()      @expose('/login', methods=['get', 'post'])     def login(self):         form = loginform(request.form)         if helpers.validate_form_on_submit(form):             user = form.get_user()             if user not none , user.verify_password(form.password.data):                 login.login_user(user)             else:                 flash('invalid username or password.')         if login.current_user.is_authenticated:             return redirect(url_for('.index'))         self._template_args['form'] = form         return super(flaskyadminindexview, self).index()      @expose('/logout')     @login_required     def logout(self):         login.logout_user()         return redirect(url_for('.login'))

in __init__.py create admin object this:

admin = admin(index_view=flaskyadminindexview())


Comments

Post a Comment

Popular posts from this blog

asynchronous - C# WinSCP .NET assembly: How to upload multiple files asynchronously -

i using winscp .net assembly uploading files. want upload multiple files asynchronous way. have created method works single upload. public class uploadingdata { private sessionoptions _sessionoptions; private session _session; //connection etc private void onconnected() { foreach (var fileinfo in localfileslist) { var task = task.factory.startnew(() => uploadfilesasync(fileinfo)); } } private async task uploadfilesasync(string file) { string remotefilepath = _session.translatelocalpathtoremote(file, @"/", "/test_data_upload"); var uploading = _session.putfiles(file, remotefilepath, false); //when done await task.run(() => thread.sleep(1000)); } } please suggest me correct way. thanks you can use backgroundworker class this: string[] images = new string[50]; foreach (var path in images) { backgroundworker
Read more

aws api gateway - SerializationException in posting new Records via Dynamodb Proxy Service in API -

i getting "__type": "com.amazon.coral.service#serializationexception" as reply in postman & in test console in api gateway trying post record directly dynamodb using api proxy services.. referring aws article - https://aws.amazon.com/blogs/compute/using-amazon-api-gateway-as-a-proxy-for-dynamodb/ here's mapping { "tablename": "tablenamegoeshere", "item": { "id" : "$context.requestid" "eventname" : "$input.path('$.eventname')", "timestamp" : $input.path('$.timestamp'), "answers": "$util.parsejson($input.path('$.answers'))" } } update: did asked ... , worked if try add array of json objects gives me above same error - here's trying now. please - couldnt find on google well #set($inputroot = $input.path('$')) { "tablename": "answer", "item": {
Read more

asp.net - Problems sending emails from forum -

i have been redesigning site has message board, has been written guy looked after site. it has few problems , written in .asp , uses .mdb files database. you can see whole thing here . feel free post if helps, test thing have set using original files , new database. the basic problem when posts message, supposed email sent them, have posted it. when replies, originator supposed message, replier has been posted. i’d have thought @ point in process there should script/file in postmessage.asp? the postmessage.asp page below. <% option explicit %> <!-- #include virtual="common/adovbs.inc" --> <html> <head> <meta http-equiv="content-type" content="text/html; charset=windows-1252"> <meta name="generator" content="microsoft frontpage 4.0"> <meta name="progid" content="frontpage.editor.document"> <title>new page 2</title> <base target="_self"
Read more