feat: added django-hijack for only Mine & Ken's usage

core/urls.py

@@ -72,6 +72,7 @@
     path("tv/clubs", views.TVClubView.as_view(), name="tvclub"),
     path("c/<int:pk>", views.OrganizationShort.as_view(), name="organization_short"),
     path("raffle", views.RaffleRedirect.as_view(), name="raffle"),
+    path("hijack/", include("hijack.urls")),
 ]
 
 if settings.LAZY_LOADING:

core/utils/hijack.py

@@ -0,0 +1,37 @@
+import logging
+
+import cachetools
+from django.conf import settings
+
+logger = logging.getLogger(__name__)
+from hijack import signals
+
+
+@cachetools.cached(cache=cachetools.LRUCache(maxsize=4096))
+def hijack_permissions_check(*, hijacker, hijacked) -> bool:
+    """Staff members may hijack other staff and regular users, but not superusers."""
+    if all(
+        [
+            hijacker.id in settings.ALLOWED_HIJACKERS,
+            hijacked.id not in settings.ALLOWED_HIJACKERS,
+            hijacker.is_superuser,
+            hijacked.is_active,
+            not hijacked,
+        ]
+    ):
+        return True
+    return False
+
+
+def print_hijack_started(sender, hijacker, hijacked, request, **kwargs):
+    print(f"{hijacker} has hijacked {hijacked}")  # todo replace with logging
+
+
+signals.hijack_started.connect(print_hijack_started)
+
+
+def print_hijack_ended(sender, hijacker, hijacked, request, **kwargs):
+    print(f"{hijacker} has released {hijacked}")
+
+
+signals.hijack_ended.connect(print_hijack_ended)

metropolis/settings.py

@@ -41,6 +41,8 @@
     "django_select2",
     "pwa",
     "oauth2_provider",
+    "hijack",
+    "hijack.contrib.admin",
 ]
 
 MIDDLEWARE = [
@@ -56,6 +58,7 @@
     "core.middleware.TimezoneMiddleware",
     "core.middleware.CustomRedirectFallbackTemporaryMiddleware",
     "oauth2_provider.middleware.OAuth2TokenMiddleware",
+    "hijack.middleware.HijackUserMiddleware",
 ]
 
 ROOT_URLCONF = "metropolis.urls"
@@ -985,6 +988,10 @@
 
 API_VERSION = "3.2.0"
 
+HIJACK_PERMISSION_CHECK = "core.utils.hijack.hijack_permissions_check"
+ALLOWED_HIJACKERS = [746, 165]  # Jason Cameron & Ken Shibata
+
+
 DEFAULT_TIMEZONE = "UTC"
 
 ANNOUNCEMENT_APPROVAL_BCC_LIST = []

pyproject.toml

@@ -71,6 +71,8 @@ isort = "*"
 
 #[tool.mypy]
 #plugins = ["mypy_django_plugin.main"]
+django-hijack = "^3.4.1"
+cachetools = "^5.3.1"
 
 [tool.django-stubs]
 django_settings_module = "metropolis.settings"