This is a lightweight blogging tool with create, edit and delete functionality for articles, configured for use on App Engine using Djangae.
Lightweight Django Blog uses Clean Blog, a stylish, responsive blog theme for Bootstrap and SB Admin 2, an admin dashboard template.
- Translatable project
- User Roles
- SEO friendly urls
- Complete admin interface
- Strict Content Security Policy (CSP)
In the lightweight-django-blog directory, run:
./install_deps
python manage.py collectstatic
python manage.py test
python manage.py runserver
Create a Google App Engine project. Edit app.yaml and change application: lightweight-django-blog to application: your-app-id and edit settings.py changing DEBUG = True to DEBUG = False.
Then, if you're in the lightweight-django-blog directory, run:
$ appcfg.py update ./
If you have two-factor authentication enabled in your Google account, run:
$ appcfg.py --oauth2 update ./
Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement or distribution of malware.
Lightweight Django Blog uses Django-CSP in order to add Content-Security-Policy headers.
User roles determine the access level or permissions of a person authorized (invited by an Administrator) to use Lightweight Django Blog.
Summary
- Administrator – nothing is off limits
- Editor – has access to all articles.
- Author – can write, edit, and publish their own articles.
- Contributor – has no publishing capability, but can write and edit their own articles until they are published.
- Follower – has no privileges (his google id and email is saved)
Each user role is capable of everything that a less powerful role is capable of. (In others words, Editors can do everything Authors can do, Authors can do everything Contributors can do, and so on.)
Administrator
An Administrator has full power over the site and can do absolutely everything. Administrators can create more Administrators, invite new users, remove users, and change user roles. They have complete control over articles and other users.
Editor
An Editor can create, edit, publish, and delete any article (not just their own).
Author
An Author can create, edit, publish, and delete only their own articles.
Contributor
A Contributor can create and edit only their own articles, but cannot publish them.
Follower
A Follower cannot do anything.