AERPAW-Platform-Control / aerpaw-portal

AERPAW Portal v2
0 stars 1 forks source link

Raw JSON output still visible to all #36

Closed rudradutta closed 1 year ago

rudradutta commented 1 year ago

I believe the intent was to eventually (maybe not yet) to hide the raw JSON output for the query at the bottom of each rendered page from Experimenters and PIs, but show them to Operators and Site Admins. At this time, it seems it is still being shown to Experimenters at least. Testing on 152.14.78.30, as rudra957@gmail.com .

mjstealey commented 1 year ago

@rudradutta - This is tied to the DJANGO_DEBUG setting in the .env file

# Django settings
export PYTHONPATH=./:./venv:./.venv
export DJANGO_ALLOWED_HOSTS='127.0.0.1'
export DJANGO_SECRET_KEY='xxxx...xxxxx'
export DJANGO_DEBUG=true                          <-- This line - set to false to suppress
export DJANGO_LOG_LEVEL='DEBUG'
export DJANGO_SESSION_COOKIE_AGE='14400'
export DJANGO_TIME_ZONE='America/New_York'

Debug section of each template has been updated to

{% if debug or user.is_operator or user.is_site_admin %}
    ...
{% endif %}

Which will always show the JSON output to operator and site_admin role holders

mjstealey commented 1 year ago

per request

deployed as described above