Access control

Pass a delegate class to the extension’s decorator using the delegate argument. Its should_display method runs each time the page is built, returning True to show the extension and False to hide it. An extension with no delegate is displayed.

Extension types that accept a delegate

Subclass the delegate class that matches the extension type, and import it from extensions.views.

dashboard_extension also accepts a delegate argument, but Cloud Management Platform does not check it, so a dashboard card is shown to every user. Admin pages and the microfrontend types do not accept a delegate. An admin page needs none, since only CloudBolt admins and global viewers can view one.

Write a delegate

This tab appears on a resource handler’s detail view only when the handler is an AWS handler.

from django.shortcuts import render

from extensions.views import tab_extension, TabExtensionDelegate
from resourcehandlers.aws.models import AWSHandler
from resourcehandlers.models import ResourceHandler


class AWSOnlyDelegate(TabExtensionDelegate):
    def should_display(self):
        return isinstance(self.instance.cast(), AWSHandler)


@tab_extension(
    model=ResourceHandler,
    title="Spend",
    description="Cost breakdown for this resource handler",
    delegate=AWSOnlyDelegate,
)
def spend_tab(request, obj_id):
    resource_handler = ResourceHandler.objects.get(id=obj_id)
    return render(
        request,
        "resource_handler_spend/templates/spend_tab.html",
        {"resource_handler": resource_handler},
    )

Inside should_display, three attributes are available:

• self.viewer: the UserProfile of the viewer.
• self.instance: the object whose detail view is being extended, on tab and custom form delegates.
• self.extension: the extension, including the decorator’s title and description.

Conditions you can test

Each can be a complete should_display body. Combine with and to narrow further.

Hiding is not protecting