zydronium/manage.get.gov
1
0
Fork 0
mirror of https://github.com/cisagov/manage.get.gov.git synced 2025-07-27 04:58:42 +02:00
Code Issues Projects Releases Packages Wiki Activity

wip

Browse source
This commit is contained in:
David Kennedy 2025-02-11 10:06:24 -05:00
parent d84aa421d9
commit a334f7dc3e
No known key found for this signature in database
GPG key ID: 6528A5386E66B96B
19 changed files with 216 additions and 131 deletions
Download patch file Download diff file Expand all files Collapse all files

29
src/registrar/config/urls.py
View file

@ -296,56 +296,56 @@ urlpatterns = [
lambda r: always_404(r, "We forgot to include this link, sorry."), lambda r: always_404(r, "We forgot to include this link, sorry."),
name="todo", name="todo",
), ),
path("domain/<int:pk>", views.DomainView.as_view(), name="domain"), path("domain/<int:domain_pk>", views.DomainView.as_view(), name="domain"),
path("domain/<int:pk>/prototype-dns", views.PrototypeDomainDNSRecordView.as_view(), name="prototype-domain-dns"), path("domain/<int:domain_pk>/prototype-dns", views.PrototypeDomainDNSRecordView.as_view(), name="prototype-domain-dns"),
path("domain/<int:pk>/users", views.DomainUsersView.as_view(), name="domain-users"), path("domain/<int:domain_pk>/users", views.DomainUsersView.as_view(), name="domain-users"),
path( path(
"domain/<int:pk>/dns", "domain/<int:domain_pk>/dns",
views.DomainDNSView.as_view(), views.DomainDNSView.as_view(),
name="domain-dns", name="domain-dns",
), ),
path( path(
"domain/<int:pk>/dns/nameservers", "domain/<int:domain_pk>/dns/nameservers",
views.DomainNameserversView.as_view(), views.DomainNameserversView.as_view(),
name="domain-dns-nameservers", name="domain-dns-nameservers",
), ),
path( path(
"domain/<int:pk>/dns/dnssec", "domain/<int:domain_pk>/dns/dnssec",
views.DomainDNSSECView.as_view(), views.DomainDNSSECView.as_view(),
name="domain-dns-dnssec", name="domain-dns-dnssec",
), ),
path( path(
"domain/<int:pk>/dns/dnssec/dsdata", "domain/<int:domain_pk>/dns/dnssec/dsdata",
views.DomainDsDataView.as_view(), views.DomainDsDataView.as_view(),
name="domain-dns-dnssec-dsdata", name="domain-dns-dnssec-dsdata",
), ),
path( path(
"domain/<int:pk>/org-name-address", "domain/<int:domain_pk>/org-name-address",
views.DomainOrgNameAddressView.as_view(), views.DomainOrgNameAddressView.as_view(),
name="domain-org-name-address", name="domain-org-name-address",
), ),
path( path(
"domain/<int:pk>/suborganization", "domain/<int:domain_pk>/suborganization",
views.DomainSubOrganizationView.as_view(), views.DomainSubOrganizationView.as_view(),
name="domain-suborganization", name="domain-suborganization",
), ),
path( path(
"domain/<int:pk>/senior-official", "domain/<int:domain_pk>/senior-official",
views.DomainSeniorOfficialView.as_view(), views.DomainSeniorOfficialView.as_view(),
name="domain-senior-official", name="domain-senior-official",
), ),
path( path(
"domain/<int:pk>/security-email", "domain/<int:domain_pk>/security-email",
views.DomainSecurityEmailView.as_view(), views.DomainSecurityEmailView.as_view(),
name="domain-security-email", name="domain-security-email",
), ),
path( path(
"domain/<int:pk>/renewal", "domain/<int:domain_pk>/renewal",
views.DomainRenewalView.as_view(), views.DomainRenewalView.as_view(),
name="domain-renewal", name="domain-renewal",
), ),
path( path(
"domain/<int:pk>/users/add", "domain/<int:domain_pk>/users/add",
views.DomainAddUserView.as_view(), views.DomainAddUserView.as_view(),
name="domain-users-add", name="domain-users-add",
), ),
@ -370,7 +370,7 @@ urlpatterns = [
name="domain-request-delete", name="domain-request-delete",
), ),
path( path(
"domain/<int:pk>/users/<int:user_pk>/delete", "domain/<int:domain_pk>/users/<int:user_pk>/delete",
views.DomainDeleteUserView.as_view(http_method_names=["post"]), views.DomainDeleteUserView.as_view(http_method_names=["post"]),
name="domain-user-delete", name="domain-user-delete",
), ),
@ -392,6 +392,7 @@ urlpatterns = [
# This way, we can share a view for djangooidc, and other pages as we see fit. # This way, we can share a view for djangooidc, and other pages as we see fit.
handler500 = "registrar.views.utility.error_views.custom_500_error_view" handler500 = "registrar.views.utility.error_views.custom_500_error_view"
handler403 = "registrar.views.utility.error_views.custom_403_error_view" handler403 = "registrar.views.utility.error_views.custom_403_error_view"
handler404 = "registrar.views.utility.error_views.custom_404_error_view"
# we normally would guard these with `if settings.DEBUG` but tests run with # we normally would guard these with `if settings.DEBUG` but tests run with
# DEBUG = False even when these apps have been loaded because settings.DEBUG # DEBUG = False even when these apps have been loaded because settings.DEBUG

146
src/registrar/decorators.py
View file

@ -1,15 +1,14 @@
from functools import wraps import functools
from django.http import JsonResponse from django.core.exceptions import PermissionDenied
from django.core.exceptions import ObjectDoesNotExist from django.utils.decorators import method_decorator
from registrar.models import DomainInformation, DomainRequest, UserDomainRole
from registrar.models.domain import Domain
from registrar.models.user_domain_role import UserDomainRole
# Constants for clarity # Constants for clarity
ALL = "all" ALL = "all"
IS_SUPERUSER = "is_superuser" IS_SUPERUSER = "is_superuser"
IS_STAFF = "is_staff" IS_STAFF = "is_staff"
IS_DOMAIN_MANAGER = "is_domain_manager" IS_DOMAIN_MANAGER = "is_domain_manager"
IS_STAFF_MANAGING_DOMAIN = "is_staff_managing_domain"
def grant_access(*rules): def grant_access(*rules):
""" """
@ -20,53 +19,128 @@ def grant_access(*rules):
@grant_access(IS_DOMAIN_MANAGER) @grant_access(IS_DOMAIN_MANAGER)
""" """
def decorator(view_func): def decorator(view):
view_func.has_explicit_access = True # Mark as explicitly access-controlled if isinstance(view, type): # If decorating a class-based view (CBV)
existing_rules = getattr(view_func, "_access_rules", set()) original_dispatch = view.dispatch # save original dispatch method
existing_rules.update(rules) # Support multiple rules in one call
view_func._access_rules = existing_rules # Store rules on the function
@wraps(view_func) @method_decorator(grant_access(*rules)) # apply the decorator to dispatch
def wrapped_dispatch(self, request, *args, **kwargs):
if not _user_has_permission(request.user, request, rules, **kwargs):
raise PermissionDenied
return original_dispatch(self, request, *args, **kwargs)
view.dispatch = wrapped_dispatch # replace dispatch with wrapped version
return view
else: # If decorating a function-based view (FBV)
view.has_explicit_access = True
existing_rules = getattr(view, "_access_rules", set())
existing_rules.update(rules)
view._access_rules = existing_rules
@functools.wraps(view)
def wrapper(request, *args, **kwargs): def wrapper(request, *args, **kwargs):
user = request.user if not _user_has_permission(request.user, request, rules, **kwargs):
raise PermissionDenied
return view(request, *args, **kwargs)
return wrapper
return decorator
def _user_has_permission(user, request, rules, **kwargs):
"""
Checks if the user meets the permission requirements.
"""
# Skip authentication if @login_not_required is applied # Skip authentication if @login_not_required is applied
if getattr(view_func, "login_not_required", False): if getattr(request, "login_not_required", False):
return view_func(request, *args, **kwargs) return True
# Allow everyone if `ALL` is in rules # Allow everyone if `ALL` is in rules
if ALL in view_func._access_rules: if ALL in rules:
return view_func(request, *args, **kwargs) return True
# Ensure user is authenticated # Ensure user is authenticated
if not user.is_authenticated: if not user.is_authenticated:
return JsonResponse({"error": "Authentication required"}, status=403) return False
conditions_met = [] conditions_met = []
if IS_STAFF in view_func._access_rules: if IS_STAFF in rules:
conditions_met.append(user.is_staff) conditions_met.append(user.is_staff)
if not any(conditions_met) and IS_SUPERUSER in view_func._access_rules: if not any(conditions_met) and IS_SUPERUSER in rules:
conditions_met.append(user.is_superuser) conditions_met.append(user.is_superuser)
if not any(conditions_met) and IS_DOMAIN_MANAGER in view_func._access_rules: if not any(conditions_met) and IS_DOMAIN_MANAGER in rules:
domain_id = kwargs.get('pk') or kwargs.get('domain_id') domain_id = kwargs.get('domain_pk')
if not domain_id: # Check UserDomainRole directly instead of fetching Domain
return JsonResponse({"error": "Domain ID missing"}, status=400) has_permission = UserDomainRole.objects.filter(user=user, domain_id=domain_id).exists()
try:
domain = Domain.objects.get(pk=domain_id)
has_permission = UserDomainRole.objects.filter(
user=user, domain=domain
).exists()
conditions_met.append(has_permission) conditions_met.append(has_permission)
except ObjectDoesNotExist:
return JsonResponse({"error": "Invalid Domain"}, status=404)
if not any(conditions_met): if not any(conditions_met) and IS_STAFF_MANAGING_DOMAIN in rules:
return JsonResponse({"error": "Access Denied"}, status=403) domain_id = kwargs.get('domain_pk')
has_permission = _can_access_other_user_domains(request, domain_id)
conditions_met.append(has_permission)
return view_func(request, *args, **kwargs) return any(conditions_met)
return wrapper
return decorator def _can_access_other_user_domains(request, domain_pk):
"""Checks to see if an authorized user (staff or superuser)
can access a domain that they did not create or were invited to.
"""
# Check if the request user is permissioned...
user_is_analyst_or_superuser = request.user.has_perm(
"registrar.analyst_access_permission"
) or request.user.has_perm("registrar.full_access_permission")
if not user_is_analyst_or_superuser:
return False
# Check if the user is attempting a valid edit action.
# In other words, if the analyst/admin did not click
# the 'Manage Domain' button in /admin,
# then they cannot access this page.
session = request.session
can_do_action = (
"analyst_action" in session
and "analyst_action_location" in session
and session["analyst_action_location"] == domain_pk
)
if not can_do_action:
return False
# Analysts may manage domains, when they are in these statuses:
valid_domain_statuses = [
DomainRequest.DomainRequestStatus.APPROVED,
DomainRequest.DomainRequestStatus.IN_REVIEW,
DomainRequest.DomainRequestStatus.REJECTED,
DomainRequest.DomainRequestStatus.ACTION_NEEDED,
# Edge case - some domains do not have
# a status or DomainInformation... aka a status of 'None'.
# It is necessary to access those to correct errors.
None,
]
requested_domain = DomainInformation.objects.filter(domain_id=domain_pk).first()
# if no domain information or domain request exist, the user
# should be able to manage the domain; however, if domain information
# and domain request exist, and domain request is not in valid status,
# user should not be able to manage domain
if (
requested_domain
and requested_domain.domain_request
and requested_domain.domain_request.status not in valid_domain_statuses
):
return False
# Valid session keys exist,
# the user is permissioned,
# and it is in a valid status
return True

6
src/registrar/registrar_middleware.py
View file

@ -6,9 +6,9 @@ import logging
import re import re
from urllib.parse import parse_qs from urllib.parse import parse_qs
from django.conf import settings from django.conf import settings
from django.core.exceptions import PermissionDenied
from django.urls import reverse from django.urls import reverse
from django.http import HttpResponseRedirect from django.http import HttpResponseRedirect
from django.http import JsonResponse
from django.urls import resolve from django.urls import resolve
from registrar.models import User from registrar.models import User
from waffle.decorators import flag_is_active from waffle.decorators import flag_is_active
@ -194,7 +194,7 @@ class RestrictAccessMiddleware:
view_func = resolver_match.func view_func = resolver_match.func
app_name = resolver_match.app_name # Get app name of resolved view app_name = resolver_match.app_name # Get app name of resolved view
except Exception: except Exception:
return JsonResponse({"error": "Not Found"}, status=404) return self.get_response(request)
# Auto-allow Django's built-in admin views (but NOT custom /admin/* views) # Auto-allow Django's built-in admin views (but NOT custom /admin/* views)
if app_name == "admin": if app_name == "admin":
@ -206,6 +206,6 @@ class RestrictAccessMiddleware:
# Enforce explicit access fules for other views # Enforce explicit access fules for other views
if not getattr(view_func, "has_explicit_access", False): if not getattr(view_func, "has_explicit_access", False):
return JsonResponse({"error": "Access Denied"}, status=403) raise PermissionDenied
return self.get_response(request) return self.get_response(request)

6
src/registrar/templates/domain_add_user.html
View file

@ -16,10 +16,10 @@
<a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a> <a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain' pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a> <a href="{% url 'domain' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain-users' pk=domain.id %}" class="usa-breadcrumb__link"><span>Domain managers</span></a> <a href="{% url 'domain-users' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>Domain managers</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item usa-current" aria-current="page"> <li class="usa-breadcrumb__list-item usa-current" aria-current="page">
<span>Add a domain manager</span> <span>Add a domain manager</span>
@ -27,7 +27,7 @@
</ol> </ol>
</nav> </nav>
{% else %} {% else %}
{% url 'domain-users' pk=domain.id as url %} {% url 'domain-users' domain_pk=domain.id as url %}
<nav class="usa-breadcrumb padding-top-0" aria-label="Domain manager breadcrumb"> <nav class="usa-breadcrumb padding-top-0" aria-label="Domain manager breadcrumb">
<ol class="usa-breadcrumb__list"> <ol class="usa-breadcrumb__list">
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">

20
src/registrar/templates/domain_detail.html
View file

@ -48,11 +48,11 @@
<p class="margin-y-0 text-primary-darker"> <p class="margin-y-0 text-primary-darker">
{% if has_domain_renewal_flag and domain.is_expired and is_domain_manager %} {% if has_domain_renewal_flag and domain.is_expired and is_domain_manager %}
This domain has expired, but it is still online. This domain has expired, but it is still online.
{% url 'domain-renewal' pk=domain.id as url %} {% url 'domain-renewal' domain_pk=domain.id as url %}
<a href="{{ url }}" class="usa-link">Renew to maintain access.</a> <a href="{{ url }}" class="usa-link">Renew to maintain access.</a>
{% elif has_domain_renewal_flag and domain.is_expiring and is_domain_manager %} {% elif has_domain_renewal_flag and domain.is_expiring and is_domain_manager %}
This domain will expire soon. This domain will expire soon.
{% url 'domain-renewal' pk=domain.id as url %} {% url 'domain-renewal' domain_pk=domain.id as url %}
<a href="{{ url }}" class="usa-link">Renew to maintain access.</a> <a href="{{ url }}" class="usa-link">Renew to maintain access.</a>
{% elif has_domain_renewal_flag and domain.is_expiring and is_portfolio_user %} {% elif has_domain_renewal_flag and domain.is_expiring and is_portfolio_user %}
This domain will expire soon. Contact one of the listed domain managers to renew the domain. This domain will expire soon. Contact one of the listed domain managers to renew the domain.
@ -82,7 +82,7 @@
{% endif %} {% endif %}
{% url 'domain-dns-nameservers' pk=domain.id as url %} {% url 'domain-dns-nameservers' domain_pk=domain.id as url %}
{% if domain.nameservers|length > 0 %} {% if domain.nameservers|length > 0 %}
{% include "includes/summary_item.html" with title='DNS name servers' domains='true' value=domain.nameservers list='true' edit_link=url editable=is_editable %} {% include "includes/summary_item.html" with title='DNS name servers' domains='true' value=domain.nameservers list='true' edit_link=url editable=is_editable %}
{% else %} {% else %}
@ -95,7 +95,7 @@
{% endif %} {% endif %}
{% endif %} {% endif %}
{% url 'domain-dns-dnssec' pk=domain.id as url %} {% url 'domain-dns-dnssec' domain_pk=domain.id as url %}
{% if domain.dnssecdata is not None %} {% if domain.dnssecdata is not None %}
{% include "includes/summary_item.html" with title='DNSSEC' value='Enabled' edit_link=url editable=is_editable %} {% include "includes/summary_item.html" with title='DNSSEC' value='Enabled' edit_link=url editable=is_editable %}
{% else %} {% else %}
@ -104,26 +104,26 @@
{% if portfolio %} {% if portfolio %}
{% if has_any_domains_portfolio_permission and has_edit_portfolio_permission %} {% if has_any_domains_portfolio_permission and has_edit_portfolio_permission %}
{% url 'domain-suborganization' pk=domain.id as url %} {% url 'domain-suborganization' domain_pk=domain.id as url %}
{% include "includes/summary_item.html" with title='Suborganization' value=domain.domain_info.sub_organization edit_link=url editable=is_editable|and:has_edit_portfolio_permission %} {% include "includes/summary_item.html" with title='Suborganization' value=domain.domain_info.sub_organization edit_link=url editable=is_editable|and:has_edit_portfolio_permission %}
{% elif has_any_domains_portfolio_permission and has_view_portfolio_permission %} {% elif has_any_domains_portfolio_permission and has_view_portfolio_permission %}
{% url 'domain-suborganization' pk=domain.id as url %} {% url 'domain-suborganization' domain_pk=domain.id as url %}
{% include "includes/summary_item.html" with title='Suborganization' value=domain.domain_info.sub_organization edit_link=url editable=is_editable|and:has_view_portfolio_permission view_button=True %} {% include "includes/summary_item.html" with title='Suborganization' value=domain.domain_info.sub_organization edit_link=url editable=is_editable|and:has_view_portfolio_permission view_button=True %}
{% endif %} {% endif %}
{% else %} {% else %}
{% url 'domain-org-name-address' pk=domain.id as url %} {% url 'domain-org-name-address' domain_pk=domain.id as url %}
{% include "includes/summary_item.html" with title='Organization' value=domain.domain_info address='true' edit_link=url editable=is_editable %} {% include "includes/summary_item.html" with title='Organization' value=domain.domain_info address='true' edit_link=url editable=is_editable %}
{% url 'domain-senior-official' pk=domain.id as url %} {% url 'domain-senior-official' domain_pk=domain.id as url %}
{% include "includes/summary_item.html" with title='Senior official' value=domain.domain_info.senior_official contact='true' edit_link=url editable=is_editable %} {% include "includes/summary_item.html" with title='Senior official' value=domain.domain_info.senior_official contact='true' edit_link=url editable=is_editable %}
{% endif %} {% endif %}
{% url 'domain-security-email' pk=domain.id as url %} {% url 'domain-security-email' domain_pk=domain.id as url %}
{% if security_email is not None and security_email not in hidden_security_emails%} {% if security_email is not None and security_email not in hidden_security_emails%}
{% include "includes/summary_item.html" with title='Security email' value=security_email edit_link=url editable=is_editable %} {% include "includes/summary_item.html" with title='Security email' value=security_email edit_link=url editable=is_editable %}
{% else %} {% else %}
{% include "includes/summary_item.html" with title='Security email' value='None provided' edit_link=url editable=is_editable %} {% include "includes/summary_item.html" with title='Security email' value='None provided' edit_link=url editable=is_editable %}
{% endif %} {% endif %}
{% url 'domain-users' pk=domain.id as url %} {% url 'domain-users' domain_pk=domain.id as url %}
{% if portfolio %} {% if portfolio %}
{% include "includes/summary_item.html" with title='Domain managers' domain_permissions=True value=domain edit_link=url editable=is_editable %} {% include "includes/summary_item.html" with title='Domain managers' domain_permissions=True value=domain edit_link=url editable=is_editable %}
{% else %} {% else %}

8
src/registrar/templates/domain_dns.html
View file

@ -13,7 +13,7 @@
<a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a> <a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain' pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a> <a href="{% url 'domain' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item usa-current" aria-current="page"> <li class="usa-breadcrumb__list-item usa-current" aria-current="page">
<span>DNS</span> <span>DNS</span>
@ -30,14 +30,14 @@
<p>You can enter your name servers, as well as other DNS-related information, in the following sections:</p> <p>You can enter your name servers, as well as other DNS-related information, in the following sections:</p>
{% url 'domain-dns-nameservers' pk=domain.id as url %} {% url 'domain-dns-nameservers' domain_pk=domain.id as url %}
<ul class="usa-list"> <ul class="usa-list">
<li><a href="{{ url }}">Name servers</a></li> <li><a href="{{ url }}">Name servers</a></li>
{% url 'domain-dns-dnssec' pk=domain.id as url %} {% url 'domain-dns-dnssec' domain_pk=domain.id as url %}
<li><a href="{{ url }}">DNSSEC</a></li> <li><a href="{{ url }}">DNSSEC</a></li>
{% if dns_prototype_flag and is_valid_domain %} {% if dns_prototype_flag and is_valid_domain %}
<li><a href="{% url 'prototype-domain-dns' pk=domain.id %}">Prototype DNS record creator</a></li> <li><a href="{% url 'prototype-domain-dns' domain_pk=domain.id %}">Prototype DNS record creator</a></li>
{% endif %} {% endif %}
</ul> </ul>

6
src/registrar/templates/domain_dnssec.html
View file

@ -14,10 +14,10 @@
<a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a> <a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain' pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a> <a href="{% url 'domain' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain-dns' pk=domain.id %}" class="usa-breadcrumb__link"><span>DNS</span></a> <a href="{% url 'domain-dns' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>DNS</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item usa-current" aria-current="page"> <li class="usa-breadcrumb__list-item usa-current" aria-current="page">
<span>DNSSEC</span> <span>DNSSEC</span>
@ -69,7 +69,7 @@
<p class="margin-y-0">It is strongly recommended that you only enable DNSSEC if you know how to set it up properly at your hosting service. If you make a mistake, it could cause your domain name to stop working.</p> <p class="margin-y-0">It is strongly recommended that you only enable DNSSEC if you know how to set it up properly at your hosting service. If you make a mistake, it could cause your domain name to stop working.</p>
</div> </div>
</div> </div>
<a href="{% url 'domain-dns-dnssec-dsdata' pk=domain.id %}" class="usa-button">Enable DNSSEC</a> <a href="{% url 'domain-dns-dnssec-dsdata' domain_pk=domain.id %}" class="usa-button">Enable DNSSEC</a>
</div> </div>
{% endif %} {% endif %}
</form> </form>

6
src/registrar/templates/domain_dsdata.html
View file

@ -18,13 +18,13 @@
<a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a> <a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain' pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a> <a href="{% url 'domain' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain-dns' pk=domain.id %}" class="usa-breadcrumb__link"><span>DNS</span></a> <a href="{% url 'domain-dns' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>DNS</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain-dns-dnssec' pk=domain.id %}" class="usa-breadcrumb__link"><span>DNSSEC</span></a> <a href="{% url 'domain-dns-dnssec' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>DNSSEC</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item usa-current" aria-current="page"> <li class="usa-breadcrumb__list-item usa-current" aria-current="page">
<span>DS data</span> <span>DS data</span>

4
src/registrar/templates/domain_nameservers.html
View file

@ -19,10 +19,10 @@
<a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a> <a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain' pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a> <a href="{% url 'domain' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain-dns' pk=domain.id %}" class="usa-breadcrumb__link"><span>DNS</span></a> <a href="{% url 'domain-dns' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>DNS</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item usa-current" aria-current="page"> <li class="usa-breadcrumb__list-item usa-current" aria-current="page">
<span>DNS name servers</span> <span>DNS name servers</span>

8
src/registrar/templates/domain_renewal.html
View file

@ -24,7 +24,7 @@
<a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a> <a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain' pk=domain.id %}" class="usa-breadcrumb__link"><span>{{domain.name}}</span></a> <a href="{% url 'domain' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>{{domain.name}}</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item usa-current" aria-current="page"> <li class="usa-breadcrumb__list-item usa-current" aria-current="page">
<span>Renewal Form</span> <span>Renewal Form</span>
@ -63,14 +63,14 @@
{% endif %} {% endif %}
{% endif %} {% endif %}
{% url 'domain-security-email' pk=domain.id as url %} {% url 'domain-security-email' domain_pk=domain.id as url %}
{% if security_email is not None and security_email not in hidden_security_emails%} {% if security_email is not None and security_email not in hidden_security_emails%}
{% include "includes/summary_item.html" with title='Security email' value=security_email custom_text_for_value_none='We strongly recommend that you provide a security email. This email will allow the public to report observed or suspected security issues on your domain.' edit_link=url editable=is_editable %} {% include "includes/summary_item.html" with title='Security email' value=security_email custom_text_for_value_none='We strongly recommend that you provide a security email. This email will allow the public to report observed or suspected security issues on your domain.' edit_link=url editable=is_editable %}
{% else %} {% else %}
{% include "includes/summary_item.html" with title='Security email' value='None provided' custom_text_for_value_none='We strongly recommend that you provide a security email. This email will allow the public to report observed or suspected security issues on your domain.' edit_link=url editable=is_editable %} {% include "includes/summary_item.html" with title='Security email' value='None provided' custom_text_for_value_none='We strongly recommend that you provide a security email. This email will allow the public to report observed or suspected security issues on your domain.' edit_link=url editable=is_editable %}
{% endif %} {% endif %}
{% url 'domain-users' pk=domain.id as url %} {% url 'domain-users' domain_pk=domain.id as url %}
{% if portfolio %} {% if portfolio %}
{% include "includes/summary_item.html" with title='Domain managers' domain_permissions=True value=domain edit_link=url editable=is_editable %} {% include "includes/summary_item.html" with title='Domain managers' domain_permissions=True value=domain edit_link=url editable=is_editable %}
{% else %} {% else %}
@ -91,7 +91,7 @@
Acknowledgement of .gov domain requirements </h3> Acknowledgement of .gov domain requirements </h3>
</legend> </legend>
<form method="post" action="{% url 'domain-renewal' pk=domain.id %}"> <form method="post" action="{% url 'domain-renewal' domain_pk=domain.id %}">
{% csrf_token %} {% csrf_token %}
<div class="usa-checkbox"> <div class="usa-checkbox">

2
src/registrar/templates/domain_security_email.html
View file

@ -16,7 +16,7 @@
<a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a> <a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain' pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a> <a href="{% url 'domain' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item usa-current" aria-current="page"> <li class="usa-breadcrumb__list-item usa-current" aria-current="page">
<span>Security email</span> <span>Security email</span>

8
src/registrar/templates/domain_sidebar.html
View file

@ -17,14 +17,14 @@
{% endif %} {% endif %}
<li class="usa-sidenav__item"> <li class="usa-sidenav__item">
{% url 'domain-dns' pk=domain.id as url %} {% url 'domain-dns' domain_pk=domain.id as url %}
<a href="{{ url }}" {% if request.path|startswith:url %}class="usa-current"{% endif %}"> <a href="{{ url }}" {% if request.path|startswith:url %}class="usa-current"{% endif %}">
DNS DNS
</a> </a>
{% if request.path|startswith:url %} {% if request.path|startswith:url %}
<ul class="usa-sidenav__sublist"> <ul class="usa-sidenav__sublist">
<li class="usa-sidenav__item"> <li class="usa-sidenav__item">
{% url 'domain-dns-nameservers' pk=domain.id as url %} {% url 'domain-dns-nameservers' domain_pk=domain.id as url %}
<a href="{{ url }}" <a href="{{ url }}"
{% if request.path == url %}class="usa-current"{% endif %} {% if request.path == url %}class="usa-current"{% endif %}
> >
@ -33,7 +33,7 @@
</li> </li>
<li class="usa-sidenav__item"> <li class="usa-sidenav__item">
{% url 'domain-dns-dnssec' pk=domain.id as url %} {% url 'domain-dns-dnssec' domain_pk=domain.id as url %}
<a href="{{ url }}" <a href="{{ url }}"
{% if request.path|startswith:url %}class="usa-current"{% endif %} {% if request.path|startswith:url %}class="usa-current"{% endif %}
> >
@ -43,7 +43,7 @@
{% if domain.dnssecdata is not None or request.path|startswith:url and request.path|endswith:'dsdata' %} {% if domain.dnssecdata is not None or request.path|startswith:url and request.path|endswith:'dsdata' %}
<ul class="usa-sidenav__sublist"> <ul class="usa-sidenav__sublist">
<li class="usa-sidenav__item"> <li class="usa-sidenav__item">
{% url 'domain-dns-dnssec-dsdata' pk=domain.id as url %} {% url 'domain-dns-dnssec-dsdata' domain_pk=domain.id as url %}
<a href="{{ url }}" <a href="{{ url }}"
{% if request.path == url %}class="usa-current"{% endif %} {% if request.path == url %}class="usa-current"{% endif %}
> >

2
src/registrar/templates/domain_suborganization.html
View file

@ -16,7 +16,7 @@
<a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a> <a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain' pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a> <a href="{% url 'domain' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item usa-current" aria-current="page"> <li class="usa-breadcrumb__list-item usa-current" aria-current="page">
<span>Suborganization</span> <span>Suborganization</span>

8
src/registrar/templates/domain_users.html
View file

@ -13,7 +13,7 @@
<a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a> <a href="{% url 'domains' %}" class="usa-breadcrumb__link"><span>Domains</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item"> <li class="usa-breadcrumb__list-item">
<a href="{% url 'domain' pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a> <a href="{% url 'domain' domain_pk=domain.id %}" class="usa-breadcrumb__link"><span>{{ domain.name }}</span></a>
</li> </li>
<li class="usa-breadcrumb__list-item usa-current" aria-current="page"> <li class="usa-breadcrumb__list-item usa-current" aria-current="page">
<span>Domain managers</span> <span>Domain managers</span>
@ -93,7 +93,7 @@
{% include 'includes/modal.html' with modal_heading="Are you sure you want to remove yourself as a domain manager?" modal_description="You will no longer be able to manage the domain <strong>"|add:domain_name|add:"</strong>."|safe modal_button_id="user-delete-button-"|add:counter_str|safe modal_button_text="Yes, remove myself" modal_button_class="usa-button--secondary" %} {% include 'includes/modal.html' with modal_heading="Are you sure you want to remove yourself as a domain manager?" modal_description="You will no longer be able to manage the domain <strong>"|add:domain_name|add:"</strong>."|safe modal_button_id="user-delete-button-"|add:counter_str|safe modal_button_text="Yes, remove myself" modal_button_class="usa-button--secondary" %}
{% endwith %} {% endwith %}
</div> </div>
<form method="POST" id="user-delete-form-{{ forloop.counter }}" action="{% url "domain-user-delete" pk=domain.id user_pk=item.permission.user.id %}" > <form method="POST" id="user-delete-form-{{ forloop.counter }}" action="{% url "domain-user-delete" domain_pk=domain.id user_pk=item.permission.user.id %}" >
{% csrf_token %} {% csrf_token %}
</form> </form>
{% else %} {% else %}
@ -108,7 +108,7 @@
{% include 'includes/modal.html' with modal_heading="Are you sure you want to remove " heading_value=email|add:"?" modal_description="<strong>"|add:email|add:"</strong> will no longer be able to manage the domain <strong>"|add:domain_name|add:"</strong>."|safe modal_button_id="user-delete-button-"|add:counter_str|safe modal_button_text="Yes, remove domain manager" modal_button_class="usa-button--secondary" %} {% include 'includes/modal.html' with modal_heading="Are you sure you want to remove " heading_value=email|add:"?" modal_description="<strong>"|add:email|add:"</strong> will no longer be able to manage the domain <strong>"|add:domain_name|add:"</strong>."|safe modal_button_id="user-delete-button-"|add:counter_str|safe modal_button_text="Yes, remove domain manager" modal_button_class="usa-button--secondary" %}
{% endwith %} {% endwith %}
</div> </div>
<form method="POST" id="user-delete-form-{{ forloop.counter }}" action="{% url "domain-user-delete" pk=domain.id user_pk=item.permission.user.id %}"> <form method="POST" id="user-delete-form-{{ forloop.counter }}" action="{% url "domain-user-delete" domain_pk=domain.id user_pk=item.permission.user.id %}">
{% csrf_token %} {% csrf_token %}
</form> </form>
{% endif %} {% endif %}
@ -123,7 +123,7 @@
></div> ></div>
{% endif %} {% endif %}
<a class="usa-button usa-button--unstyled usa-button--with-icon" href="{% url 'domain-users-add' pk=domain.id %}"> <a class="usa-button usa-button--unstyled usa-button--with-icon" href="{% url 'domain-users-add' domain_pk=domain.id %}">
<svg class="usa-icon" aria-hidden="true" focusable="false" role="img" width="24" height="24"> <svg class="usa-icon" aria-hidden="true" focusable="false" role="img" width="24" height="24">
<use xlink:href="{%static 'img/sprite.svg'%}#add_circle"></use> <use xlink:href="{%static 'img/sprite.svg'%}#add_circle"></use>
</svg><span class="margin-left-05">Add a domain manager</span> </svg><span class="margin-left-05">Add a domain manager</span>

41
src/registrar/views/domain.py
View file

@ -15,6 +15,7 @@ from django.shortcuts import redirect, render, get_object_or_404
from django.urls import reverse from django.urls import reverse
from django.views.generic.edit import FormMixin from django.views.generic.edit import FormMixin
from django.conf import settings from django.conf import settings
from registrar.decorators import IS_DOMAIN_MANAGER, IS_STAFF_MANAGING_DOMAIN, grant_access
from registrar.forms.domain import DomainSuborganizationForm, DomainRenewalForm from registrar.forms.domain import DomainSuborganizationForm, DomainRenewalForm
from registrar.models import ( from registrar.models import (
Domain, Domain,
@ -95,7 +96,7 @@ class DomainBaseView(DomainPermissionView):
self.session = request.session self.session = request.session
# domain:private_key is the session key to use for # domain:private_key is the session key to use for
# caching the domain in the session # caching the domain in the session
domain_pk = "domain:" + str(self.kwargs.get("pk")) domain_pk = "domain:" + str(self.kwargs.get("domain_pk"))
cached_domain = self.session.get(domain_pk) cached_domain = self.session.get(domain_pk)
if cached_domain: if cached_domain:
@ -108,7 +109,7 @@ class DomainBaseView(DomainPermissionView):
""" """
update domain in the session cache update domain in the session cache
""" """
domain_pk = "domain:" + str(self.kwargs.get("pk")) domain_pk = "domain:" + str(self.kwargs.get("domain_pk"))
self.session[domain_pk] = self.object self.session[domain_pk] = self.object
@ -256,7 +257,7 @@ class DomainFormBaseView(DomainBaseView, FormMixin):
exc_info=True, exc_info=True,
) )
@grant_access(IS_DOMAIN_MANAGER, IS_STAFF_MANAGING_DOMAIN)
class DomainView(DomainBaseView): class DomainView(DomainBaseView):
"""Domain detail overview page.""" """Domain detail overview page."""
@ -310,7 +311,7 @@ class DomainView(DomainBaseView):
self.object = self.get_object() self.object = self.get_object()
self._update_session_with_domain() self._update_session_with_domain()
@grant_access(IS_DOMAIN_MANAGER, IS_STAFF_MANAGING_DOMAIN)
class DomainRenewalView(DomainBaseView): class DomainRenewalView(DomainBaseView):
"""Domain detail overview page.""" """Domain detail overview page."""
@ -344,9 +345,9 @@ class DomainRenewalView(DomainBaseView):
and (requested_domain.is_expiring() or requested_domain.is_expired()) and (requested_domain.is_expiring() or requested_domain.is_expired())
) )
def post(self, request, pk): def post(self, request, domain_pk):
domain = get_object_or_404(Domain, id=pk) domain = get_object_or_404(Domain, id=domain_pk)
form = DomainRenewalForm(request.POST) form = DomainRenewalForm(request.POST)
@ -363,7 +364,7 @@ class DomainRenewalView(DomainBaseView):
"This domain has not been renewed for one year, " "This domain has not been renewed for one year, "
"please email help@get.gov if this problem persists.", "please email help@get.gov if this problem persists.",
) )
return HttpResponseRedirect(reverse("domain", kwargs={"pk": pk})) return HttpResponseRedirect(reverse("domain", kwargs={"domain_pk": domain_pk}))
# if not valid, render the template with error messages # if not valid, render the template with error messages
# passing editable, has_domain_renewal_flag, and is_editable for re-render # passing editable, has_domain_renewal_flag, and is_editable for re-render
@ -379,7 +380,7 @@ class DomainRenewalView(DomainBaseView):
}, },
) )
@grant_access(IS_DOMAIN_MANAGER, IS_STAFF_MANAGING_DOMAIN)
class DomainOrgNameAddressView(DomainFormBaseView): class DomainOrgNameAddressView(DomainFormBaseView):
"""Organization view""" """Organization view"""
@ -396,7 +397,7 @@ class DomainOrgNameAddressView(DomainFormBaseView):
def get_success_url(self): def get_success_url(self):
"""Redirect to the overview page for the domain.""" """Redirect to the overview page for the domain."""
return reverse("domain-org-name-address", kwargs={"pk": self.object.pk}) return reverse("domain-org-name-address", kwargs={"domain_pk": self.object.pk})
def form_valid(self, form): def form_valid(self, form):
"""The form is valid, save the organization name and mailing address.""" """The form is valid, save the organization name and mailing address."""
@ -455,7 +456,7 @@ class DomainSubOrganizationView(DomainFormBaseView):
def get_success_url(self): def get_success_url(self):
"""Redirect to the overview page for the domain.""" """Redirect to the overview page for the domain."""
return reverse("domain-suborganization", kwargs={"pk": self.object.pk}) return reverse("domain-suborganization", kwargs={"domain_pk": self.object.pk})
def form_valid(self, form): def form_valid(self, form):
"""The form is valid, save the organization name and mailing address.""" """The form is valid, save the organization name and mailing address."""
@ -494,7 +495,7 @@ class DomainSeniorOfficialView(DomainFormBaseView):
def get_success_url(self): def get_success_url(self):
"""Redirect to the overview page for the domain.""" """Redirect to the overview page for the domain."""
return reverse("domain-senior-official", kwargs={"pk": self.object.pk}) return reverse("domain-senior-official", kwargs={"domain_pk": self.object.pk})
def form_valid(self, form): def form_valid(self, form):
"""The form is valid, save the senior official.""" """The form is valid, save the senior official."""
@ -587,7 +588,7 @@ class PrototypeDomainDNSRecordView(DomainFormBaseView):
return True return True
def get_success_url(self): def get_success_url(self):
return reverse("prototype-domain-dns", kwargs={"pk": self.object.pk}) return reverse("prototype-domain-dns", kwargs={"domain_pk": self.object.pk})
def find_by_name(self, items, name): def find_by_name(self, items, name):
"""Find an item by name in a list of dictionaries.""" """Find an item by name in a list of dictionaries."""
@ -764,7 +765,7 @@ class DomainNameserversView(DomainFormBaseView):
def get_success_url(self): def get_success_url(self):
"""Redirect to the nameservers page for the domain.""" """Redirect to the nameservers page for the domain."""
return reverse("domain-dns-nameservers", kwargs={"pk": self.object.pk}) return reverse("domain-dns-nameservers", kwargs={"domain_pk": self.object.pk})
def get_context_data(self, **kwargs): def get_context_data(self, **kwargs):
"""Adjust context from FormMixin for formsets.""" """Adjust context from FormMixin for formsets."""
@ -885,7 +886,7 @@ class DomainDNSSECView(DomainFormBaseView):
def get_success_url(self): def get_success_url(self):
"""Redirect to the DNSSEC page for the domain.""" """Redirect to the DNSSEC page for the domain."""
return reverse("domain-dns-dnssec", kwargs={"pk": self.object.pk}) return reverse("domain-dns-dnssec", kwargs={"domain_pk": self.object.pk})
def post(self, request, *args, **kwargs): def post(self, request, *args, **kwargs):
"""Form submission posts to this view.""" """Form submission posts to this view."""
@ -936,7 +937,7 @@ class DomainDsDataView(DomainFormBaseView):
def get_success_url(self): def get_success_url(self):
"""Redirect to the DS data page for the domain.""" """Redirect to the DS data page for the domain."""
return reverse("domain-dns-dnssec-dsdata", kwargs={"pk": self.object.pk}) return reverse("domain-dns-dnssec-dsdata", kwargs={"domain_pk": self.object.pk})
def get_context_data(self, **kwargs): def get_context_data(self, **kwargs):
"""Adjust context from FormMixin for formsets.""" """Adjust context from FormMixin for formsets."""
@ -1042,7 +1043,7 @@ class DomainSecurityEmailView(DomainFormBaseView):
def get_success_url(self): def get_success_url(self):
"""Redirect to the security email page for the domain.""" """Redirect to the security email page for the domain."""
return reverse("domain-security-email", kwargs={"pk": self.object.pk}) return reverse("domain-security-email", kwargs={"domain_pk": self.object.pk})
def form_valid(self, form): def form_valid(self, form):
"""The form is valid, call setter in model.""" """The form is valid, call setter in model."""
@ -1199,7 +1200,7 @@ class DomainAddUserView(DomainFormBaseView):
form_class = DomainAddUserForm form_class = DomainAddUserForm
def get_success_url(self): def get_success_url(self):
return reverse("domain-users", kwargs={"pk": self.object.pk}) return reverse("domain-users", kwargs={"domain_pk": self.object.pk})
def form_valid(self, form): def form_valid(self, form):
"""Add the specified user to this domain.""" """Add the specified user to this domain."""
@ -1304,7 +1305,7 @@ class DomainInvitationCancelView(SuccessMessageMixin, DomainInvitationPermission
return HttpResponseRedirect(self.get_success_url()) return HttpResponseRedirect(self.get_success_url())
def get_success_url(self): def get_success_url(self):
return reverse("domain-users", kwargs={"pk": self.object.domain.id}) return reverse("domain-users", kwargs={"domain_pk": self.object.domain.id})
def get_success_message(self, cleaned_data): def get_success_message(self, cleaned_data):
return f"Canceled invitation to {self.object.email}." return f"Canceled invitation to {self.object.email}."
@ -1317,13 +1318,13 @@ class DomainDeleteUserView(UserDomainRolePermissionDeleteView):
def get_object(self, queryset=None): def get_object(self, queryset=None):
"""Custom get_object definition to grab a UserDomainRole object from a domain_id and user_id""" """Custom get_object definition to grab a UserDomainRole object from a domain_id and user_id"""
domain_id = self.kwargs.get("pk") domain_id = self.kwargs.get("domain_pk")
user_id = self.kwargs.get("user_pk") user_id = self.kwargs.get("user_pk")
return UserDomainRole.objects.get(domain=domain_id, user=user_id) return UserDomainRole.objects.get(domain=domain_id, user=user_id)
def get_success_url(self): def get_success_url(self):
"""Refreshes the page after a delete is successful""" """Refreshes the page after a delete is successful"""
return reverse("domain-users", kwargs={"pk": self.object.domain.id}) return reverse("domain-users", kwargs={"domain_pk": self.object.domain.id})
def get_success_message(self): def get_success_message(self):
"""Returns confirmation content for the deletion event""" """Returns confirmation content for the deletion event"""

2
src/registrar/views/domains_json.py
View file

@ -143,7 +143,7 @@ def serialize_domain(domain, request):
"state": domain.state, "state": domain.state,
"state_display": domain.state_display(request), "state_display": domain.state_display(request),
"get_state_help_text": domain.get_state_help_text(), "get_state_help_text": domain.get_state_help_text(),
"action_url": reverse("domain", kwargs={"pk": domain.id}), "action_url": reverse("domain", kwargs={"domain_pk": domain.id}),
"action_label": ("View" if view_only else "Manage"), "action_label": ("View" if view_only else "Manage"),
"svg_icon": ("visibility" if view_only else "settings"), "svg_icon": ("visibility" if view_only else "settings"),
"domain_info__sub_organization": suborganization_name, "domain_info__sub_organization": suborganization_name,

8
src/registrar/views/utility/error_views.py
View file

@ -35,3 +35,11 @@ def custom_403_error_view(request, exception=None, context=None):
if context is None: if context is None:
context = {} context = {}
return render(request, "403.html", context=context, status=403) return render(request, "403.html", context=context, status=403)
def custom_404_error_view(request, exception=None, context=None):
"""Used to redirect 404 errors to a custom view"""
print("this is called")
if context is None:
context = {}
return render(request, "404.html", context=context, status=404)

4
src/registrar/views/utility/mixins.py
View file

@ -203,7 +203,7 @@ class DomainPermission(PermissionsLoginMixin):
"""Check if this user has access to this domain. """Check if this user has access to this domain.
The user is in self.request.user and the domain needs to be looked The user is in self.request.user and the domain needs to be looked
up from the domain's primary key in self.kwargs["pk"] up from the domain's primary key in self.kwargs["domain_pk"]
""" """
if not self.request.user.is_authenticated: if not self.request.user.is_authenticated:
@ -212,7 +212,7 @@ class DomainPermission(PermissionsLoginMixin):
if self.request.user.is_restricted(): if self.request.user.is_restricted():
return False return False
pk = self.kwargs["pk"] pk = self.kwargs["domain_pk"]
# If pk is none then something went very wrong... # If pk is none then something went very wrong...
if pk is None: if pk is None:
raise ValueError("Primary key is None") raise ValueError("Primary key is None")

1
src/registrar/views/utility/permission_views.py
View file

@ -39,6 +39,7 @@ class DomainPermissionView(DomainPermission, DetailView, abc.ABC):
# DetailView property for what model this is viewing # DetailView property for what model this is viewing
model = Domain model = Domain
pk_url_kwarg = "domain_pk"
# variable name in template context for the model object # variable name in template context for the model object
context_object_name = "domain" context_object_name = "domain"