plain.auth 0.20.4__py3-none-any.whl → 0.20.6__py3-none-any.whl

plain/auth/CHANGELOG.md

@@ -1,5 +1,25 @@
 # plain-auth changelog
 
+## [0.20.6](https://github.com/dropseed/plain/releases/plain-auth@0.20.6) (2025-10-22)
+
+### What's changed
+
+- Fixed impersonation check in `AuthViewMixin` to properly handle optional `plain-admin` dependency using `get_request_impersonator()` function instead of `getattr()` ([548a385](https://github.com/dropseed/plain/commit/548a3859f5))
+
+### Upgrade instructions
+
+- No changes required
+
+## [0.20.5](https://github.com/dropseed/plain/releases/plain-auth@0.20.5) (2025-10-20)
+
+### What's changed
+
+- Updated `pyproject.toml` to use standard `[dependency-groups]` format instead of uv-specific `[tool.uv]` section for development dependencies ([1b43a3a](https://github.com/dropseed/plain/commit/1b43a3a272))
+
+### Upgrade instructions
+
+- No changes required
+
 ## [0.20.4](https://github.com/dropseed/plain/releases/plain-auth@0.20.4) (2025-10-16)
 
 ### What's changed

plain/auth/views.py

@@ -23,6 +23,11 @@ from .utils import resolve_url
 if TYPE_CHECKING:
     from plain.http import Request
 
+try:
+    from plain.admin.impersonate import get_request_impersonator
+except ImportError:
+    get_request_impersonator: Any = None
+
 
 class LoginRequired(Exception):
     def __init__(self, login_url: str | None = None, redirect_field_name: str = "next"):
@@ -65,14 +70,17 @@ class AuthViewMixin(SessionViewMixin):
         if self.admin_required:
             # At this point, we know user is authenticated (from check above)
             # Check if impersonation is active
-            if impersonator := getattr(self, "impersonator", None):
-                # Impersonators should be able to view admin pages while impersonating.
-                # There's probably never a case where an impersonator isn't admin, but it can be configured.
-                if not impersonator.is_admin:
-                    raise PermissionDenied(
-                        "You do not have permission to access this page."
-                    )
-            elif not self.user.is_admin:
+            if get_request_impersonator:
+                if impersonator := get_request_impersonator(self.request):
+                    # Impersonators should be able to view admin pages while impersonating.
+                    # There's probably never a case where an impersonator isn't admin, but it can be configured.
+                    if not impersonator.is_admin:
+                        raise PermissionDenied(
+                            "You do not have permission to access this page."
+                        )
+                    return
+
+            if not self.user.is_admin:
                 # Show a 404 so we don't expose admin urls to non-admin users
                 raise Http404()
 

{plain_auth-0.20.4.dist-info → plain_auth-0.20.6.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plain.auth
-Version: 0.20.4
+Version: 0.20.6
 Summary: Add users to your app and decide what they can access.
 Author-email: Dave Gaeddert <dave.gaeddert@dropseed.dev>
 License-File: LICENSE

{plain_auth-0.20.4.dist-info → plain_auth-0.20.6.dist-info}/RECORD

@@ -1,4 +1,4 @@
-plain/auth/CHANGELOG.md,sha256=ZVjrOfpSyQpusskFrqBy4zE6xkdwgxqtKp52p9C3OyU,5706
+plain/auth/CHANGELOG.md,sha256=JtHcjYZy_Di1OCuCSduk91clMWnD5G4_2zEqSWpsypo,6463
 plain/auth/README.md,sha256=I1SeOyrBnF0GAjD7T0k5OlZ2bSHz9---nElinaobewc,4030
 plain/auth/__init__.py,sha256=CrOsS74CPGN1nPTTfie13mPgdyVLRyZ1YwDPIA77uaA,179
 plain/auth/default_settings.py,sha256=65VzDn3j61OMn78Lg6Zuds4A8QKzJJ_0G9KoFqAOIRo,466
@@ -7,8 +7,8 @@ plain/auth/sessions.py,sha256=xDp1EiB0cV5w3L5XioqO8vs77wnF8cvreExms3-e744,6015
 plain/auth/templates.py,sha256=CVtuIdBgOgYB2o61zpOPJb6nMx_gU61i_3PDQx8FjVs,770
 plain/auth/test.py,sha256=SHawhwarJEMVfaLkjpiuFVSWZoGIMwhzXreU_T1zvCE,1599
 plain/auth/utils.py,sha256=9kKWh1QqxA8Esct-jBvTCdjBYOHpO_Tg1YeV9WxYmxg,1362
-plain/auth/views.py,sha256=vWLMeykTrA5LtA179uE7w-BY9Kv25r1VScLHooDvZUA,4792
-plain_auth-0.20.4.dist-info/METADATA,sha256=LX7Mn95wVSOGa5ToCVmlJiukpgVARMIG9bPWYUtxf7A,4390
-plain_auth-0.20.4.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-plain_auth-0.20.4.dist-info/licenses/LICENSE,sha256=m0D5O7QoH9l5Vz_rrX_9r-C8d9UNr_ciK6Qwac7o6yo,3175
-plain_auth-0.20.4.dist-info/RECORD,,
+plain/auth/views.py,sha256=dGkPQpzPywqMDk3uDhmbAEVojMShhjwJj88f4ztmYmQ,5022
+plain_auth-0.20.6.dist-info/METADATA,sha256=3lwbB0CqSJqpdGPHOUUgHAEssSwAc76wvZxT4sP4N-M,4390
+plain_auth-0.20.6.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+plain_auth-0.20.6.dist-info/licenses/LICENSE,sha256=m0D5O7QoH9l5Vz_rrX_9r-C8d9UNr_ciK6Qwac7o6yo,3175
+plain_auth-0.20.6.dist-info/RECORD,,