AttributeError: 'ObjectPermissionBackend' object has no attribute 'get_user' about django-rules

[orf]

I've made a ticket on the Django bug tracker: https://code.djangoproject.com/ticket/27542#ticket

PR #47 adds a note to the readme about this.

[blueyed]

I think you are meant to pass in an explicit backend, if the first one does not work. Closing.

Django code reference: https://github.com/django/django/blob/59bbacf88db1b533ae05ea38e01b5e1ec9f59622/django/test/client.py#L628-L632

[orf]

I think this should be added to the documentation, this is quite confusing.

[blueyed]

@orf
Please consider creating a PR then.

[dfunckt]

Reopening to have the issue as a reminder to investigate whether adding get_user to the backend breaks other stuff, as that would be the proper "fix" here.

[orf]

I don't think that's a good idea, I think it's a Django problem. Instead of blindly getting the first auth backend it should be a little smart and skip ones without a get_user.

[dfunckt]

Hmm, yeah, I went through Django's code and it seems it's not a good idea -- you'd force_login a user but you'd later get AnonymousUser back instead, if the backend's get_user method returned None (as rules' one would).

Agreed, the proper way forward is documenting it here and raising an issue with Django.

[blueyed]

Awesome, it got fixed in Django: django/django@47744a0.
Let's close it here then.