Remove hardcoded connection string (incl password) and put it in the settings

file instead.
Also, inherit from Model implementation so we can use permissions should we want to.

diff --git a/planetadmin/auth.py b/planetadmin/auth.py
index 3df82bc689fba01a13fc999871e98abcf81e179b..acd25265b31d1f37f24aa7ef0ac62753d261561c 100644 (file)
--- a/planetadmin/auth.py
+++ b/planetadmin/auth.py
@@ -1,9 +1,11 @@
 from django.contrib.auth.models import User
+from django.contrib.auth.backends import ModelBackend
+from django.conf import settings
 import psycopg2
 
-class AuthBackend:
+class AuthBackend(ModelBackend):
        def authenticate(self, username=None, password=None):
-               conn = psycopg2.connect('host=wwwmaster.postgresql.org dbname=186_www user=auth_svc password=g7y3m9u8 sslmode=require')
+               conn = psycopg2.connect(settings.AUTH_CONNECTION_STRING)
                try:
                        conn.set_client_encoding('UNICODE')
                        cur = conn.cursor()

diff --git a/planetadmin/local_settings.py.sample b/planetadmin/local_settings.py.sample
index 7d297881e575588db3ef66d58ed764ba3c4f5621..304ad43ab978085a2a23e8d4e66b5d7ee181672a 100644 (file)
--- a/planetadmin/local_settings.py.sample
+++ b/planetadmin/local_settings.py.sample
@@ -7,3 +7,4 @@ DEBUG = True
 
 NOTIFYADDR='some@where.com'
 
+AUTH_CONNECTION_STRING='put community login connection string here'