Menu
I am using django's PermissionDenied to render 403.html whenever the user is not allowed to access any page.
There are whole lot of pages, of different type, for example, Product page, User Page, User Contact information, Owner Information.
I would like to add the custom message with PermissionDenied, that would tell the user exactly why he can not view this page. I would like to add the following dynamic message to the 403.html.
You have are trying to `View a Product (id:3094384)` while having a `Trail` account. You are not authorized to view this product.
And
You have are trying to `View a Customer (id:48)` which is Private. You are not authorized to view this User.
and so on.
elif role.id == Project.ROLE_SALES and not project.sales_person_id == user_id:
raise PermissionDenied
<body class="error-page">
<!-- content -->
<section>
<div class="error403">
<h1>403</h1>
</div>
<p class="description">Oops! Request forbidden...</p>
<p>Sorry, it appears the page you were looking for is forbidden and not accessible. If the problem persists, please
contact web Administrator.</p>
# HERE I WANT TO SHOW DYNAMIC MESSAGE.
<a href="{{ request.META.HTTP_REFERER }}" class="btn btn-danger403 btn-primary btn-large" >
Go Back </a>
{{ except }}
</section>
<script src="{% static 'js/jquery.min.js' %}"></script>
<script src="{% static 'js/bootstrap.js' %}"></script>
</body>
raise PermissionDenied("Custom message")
Pass a context to PermissionDenied?
Suggestions.
399
Therefore it requires Django’s contrib.sessions application. This class stores the message data in a cookie (signed with a secret hash to prevent manipulation) to persist notifications across requests. Old messages are dropped if the cookie data size would exceed 2048 bytes.
For this, Django provides full support for cookie- and session-based messaging, for both anonymous and authenticated users. The messages framework allows you to temporarily store messages in one request and retrieve them for display in a subsequent request (usually the next one).
PermissionDenied exception can be used to implement nested permission classes where child permission checks should not proceed when the parent permission check fails. Django REST framework is a robust framework to write REST APIs and is highly customizable.
Django REST framework is a powerful and flexible toolkit for building Web APIs in the Django framework. Django REST framework comes with a robust permission manager which can be used to restrict user permission per view or per-object basis. To use the permission check you need to add the specific permission to the permission_classes.
This answer is probably arriving very late for you. But here it is. You can use this in your Django code:
raise PermissionDenied("Custom message")
And then display the custom message using below snippet in the 403.html template:
{% if exception %}
<p>{{ exception }}</p>
{% else %}
<p>Static generic message</p>
{% endif %}The message string passed to 'PermissionDenied' is available in template context as explained in Django documentation - https://docs.djangoproject.com/en/1.10/ref/views/#http-forbidden-view
167
I came across the same issue and resolved it using the Django messages framework to pass a custom message to the template.
https://docs.djangoproject.com/en/1.8/ref/contrib/messages/
My specific example:
from django.contrib import messages
...
messages.error(request, 'The submission deadline has passed.')
raise PermissionDenied
The messages can then be output in the template as described in the documentation.
2
You can try like this:
class SomeException(Exception):
message = 'An error occurred.'
def __init__(self, message):
self.message = message
def __str__(self):
return repr(self.message)
#usage
raise SomeException("Hello, you have an exception here")
Another way of sending a message to template is like:
if not request.user.is_staff: #or your condition
context['flash_message']= "permission error occurred"
retrun render_to_response('template.html', context)
# template
<!-- I am using bootstrap here -->
<div class="alert alert-{{ flash_message_type }} flash_message hide">
{{ flash_message | safe }}
</div>
<script>
...
if($.trim($(".flash_message").html()) != ''){
$(".flash_message").slideDown();
setTimeout(function(){
$(".flash_message").slideUp();
}, 5000);
};
</script>
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
