"Impersonate" user

[joe.ba...@gmail.com]

One of the cooler and more useful features of web2py is the "impersonate" feature for Auth.  It lets me log in as one of my users and see EXACTLY what the user sees and access their information directly.  Another click and I'm back to being "me" without missing a beat.

Looking into migrating to py4web, I'm wondering how this useful feature can be added (safely) to py4web sites using "tags" as we now have.

-- Joe

[Massimo DiPierro]

Good idea. Will add this asap

--
You received this message because you are subscribed to the Google Groups "py4web" group.
To unsubscribe from this group and stop receiving emails from it, send an email to py4web+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/py4web/5b47c390-2f7c-47b3-99bb-f19d5c719898n%40googlegroups.com.

[icodk]

web2py impersonate user feature is  very useful for me also, from the obvious reason that Joe mentioned.

Is it already implemented ?

[Massimo DiPierro]

There is no API for it but it is possible. Let me create an example and maybe add an API for it

To view this discussion on the web visit https://groups.google.com/d/msgid/py4web/c617c67b-9243-4f71-829c-c23881fff2a8n%40googlegroups.com.

[icodk]

That will be great 

Thanks

[Massimo]

Please give this a try (requires latest master):

@action("switch_impersonation")

@action.uses(auth.user)

def "switch_impersonation():

     if not auth.is_impersonating():

          # impersonate and redirect

          auth.impersonate(db.auth(email="a...@example.com").id, next_url=URL("index"))

     else:

           auth.stop_impersonation(next_url=URL("index"))

[icodk]

Tested it and got the following error:
    auth.impersonate(db.auth(email="a...@example.com").id, next_url=URL("index"))
  File "C:\Python310\lib\site-packages\pydal\base.py", line 769, in __getattr__
    return BasicStorage.__getattribute__(self, key)
AttributeError: 'DAL' object has no attribute 'auth'

[Massimo DiPierro]

my bad. in the example

auth.impersonate(db.auth(email="a...@example.com").id)

should be

auth.impersonate(db.auth_user(email="a...@example.com").id)

and you should use an existing email to impersonate. 

To view this discussion on the web visit https://groups.google.com/d/msgid/py4web/47037492-1d63-436f-b0b0-bb0e4a7f9cebn%40googlegroups.com.

[Massimo]

I have a new version and I think it works fine. Please check it. I also added an example in the documentation (not published yet).

The reason the email appears as "None" when impersonating a user is probably that the user being impersonated does not have an email.

That would be a bigger problem than just displaying None.

Can you please confirm this works now and you can display the email of a valid impersonated user?

Massimo

[Massimo DiPierro]

looks like this needs one more iteration. ;-)

To view this discussion on the web visit https://groups.google.com/d/msgid/py4web/61cfd1d5-e3be-4dd8-b8b9-8605a7f7539bn%40googlegroups.com.