dhan avatar dhan committed 2a3ed81

Added inclusion list for allowed uri's

Comments (0)

Files changed (1)

impersonate/helpers.py

 
 
 def check_allow_for_uri(uri):
+    """
+    Allow if current uri is not on excluded list and is on inclusion list (if specified)
+    """
     uri = uri.lstrip('/')
 
     exclusions = getattr(settings, 'IMPERSONATE_URI_EXCLUSIONS', (r'^admin/',))
     if not isinstance(exclusions, (list, tuple)):
         exclusions = (exclusions,)
-
     for exclusion in exclusions:
         if re.search(exclusion, uri):
             return False
 
+    inclusions = getattr(settings, 'IMPERSONATE_URI_INCLUSIONS', None)
+    if inclusions:
+        for inclusion in inclusions:
+            if re.search(inclusion, uri):
+                return True
+        return False
+
     return True
Tip: Filter by directory path e.g. /media app.js to search for public/media/app.js.
Tip: Use camelCasing e.g. ProjME to search for ProjectModifiedEvent.java.
Tip: Filter by extension type e.g. /repo .js to search for all .js files in the /repo directory.
Tip: Separate your search with spaces e.g. /ssh pom.xml to search for src/ssh/pom.xml.
Tip: Use ↑ and ↓ arrow keys to navigate and return to view the file.
Tip: You can also navigate files with Ctrl+j (next) and Ctrl+k (previous) and view the file with Ctrl+o.
Tip: You can also navigate files with Alt+j (next) and Alt+k (previous) and view the file with Alt+o.