A better @permission_required decorator for Django

decorators.py

try:
    from functools import wraps
except ImportError:
    from django.utls.functional import wraps

from django.conf import settings
from django.contrib.auth import REDIRECT_FIELD_NAME
from django.http import HttpResponseForbidden, HttpResponseRedirect
from django.template import loader, RequestContext, TemplateDoesNotExist
from django.utils.decorators import available_attrs
from django.utils.http import urlquote


def permission_required(perm, login_url=None, redirect=REDIRECT_FIELD_NAME):
    """A replacement for django.contrib.auth.decorators.permission_required
    that doesn't ask authenticated users to log in."""

    if not login_url:
        login_url = settings.LOGIN_URL

    def decorator(view_fn):
        def _wrapped_view(request, *args, **kwargs):
            if request.user.is_authenticated():
                if request.user.has_perm(perm):
                    return view_fn(request, *args, **kwargs)
                t = loader.get_template('403.html')
                c = RequestContext(request, {'request_path': request.path})
                return HttpResponseForbidden(t.render(c))
            path = urlquote(request.get_full_path)
            tup = login_url, redirect, path
            return HttpResponseRedirect('%s?%s=%s' % tup)
        return wraps(view_fn, assigned=available_attrs(view_fn))(_wrapped_view)
    return decorator