Browse Source

HUE-9024 [core] Prevent AnonymousUser object is not iterable on login

Romain 6 years ago
parent
commit
c320069bee
1 changed files with 1 additions and 2 deletions
  1. 1 2
      desktop/core/src/desktop/auth/backend.py

+ 1 - 2
desktop/core/src/desktop/auth/backend.py

@@ -101,13 +101,12 @@ def is_admin(user):
   is_admin = False
   is_admin = False
   if hasattr(user, 'is_superuser'):
   if hasattr(user, 'is_superuser'):
     is_admin = user.is_superuser
     is_admin = user.is_superuser
-  if not is_admin:
+  if not is_admin and user.is_authenticated():
     try:
     try:
       user = rewrite_user(user)
       user = rewrite_user(user)
       is_admin = user.has_hue_permission(action="superuser", app="useradmin")
       is_admin = user.has_hue_permission(action="superuser", app="useradmin")
     except Exception as e:
     except Exception as e:
       LOG.exception("Could not validate if %s is a superuser assuming False." % user)
       LOG.exception("Could not validate if %s is a superuser assuming False." % user)
-      is_admin = False
   return is_admin
   return is_admin
 
 
 class DefaultUserAugmentor(object):
 class DefaultUserAugmentor(object):