Changes between Version 12 and Version 13 of BluePrintAuthorization

Timestamp:

06/18/10 21:04:35 (14 years ago)

Author:

Fran Boon

Comment:

--

BluePrintAuthorization

@@ -16 +16 @@
 
 deployment_settings_modules = Storage(
-    name = "gis",
-    name_nice = "Mapping",
-    description = "Situation Awareness & Geospatial Analysis",
-    readable = None,    # All Users (inc Anonymous) can see this module in the default menu & access the controller
-    writable = None,    # All Authenticated users can edit resources which aren't specially protected
-    module_type = 2,    # Used to locate the module in the default menu
-    resource_readable = Storage(
-        apikey = 1,     # This resource is only visible to Administrators
-    )
-    resource_writable = Storage(
-        layer_js = deployment_settings.auth.roles["AdvancedJS"],    # This resource requires the 'AdvancedJS' role to edit (or admin)
-    )
+    gis = Storage(
+        name_nice = "Mapping",
+        description = "Situation Awareness & Geospatial Analysis",
+        readable = None,    # All Users (inc Anonymous) can see this module in the default menu & access the controller
+        writable = None,    # All Authenticated users can edit resources which aren't specially protected
+        module_type = 2,    # Used to locate the module in the default menu
+        resource_readable = Storage(
+            apikey = 1,     # This resource is only visible to Administrators
+        )
+        resource_writable = Storage(
+            layer_js = deployment_settings.auth.roles["AdvancedJS"],    # This resource requires the 'AdvancedJS' role to edit (or admin)
+        )
+    ),
+    ...
 )
 }}}
+
  * A Developer needs to be able to restrict access to a Function
   * ~~Decorator function : @auth.requires_membership("Administrator")~~
    * doesn't support OR (we could easily write our own function to do this, though)
+
  * A Developer needs to be able to restrict access to a resource
   * REST controller can be blocked via a Decorator
@@ -38 +42 @@
   * We could check for what other functions can access data? Sync. Hard to maintain though.
   * Need a new method: open by default & restricted manually
-   * Do all accesses go via S3XRC? If not, then needs to be a DAL-level method!
+   * Needs to be a DAL-level method since not all accesses go via S3XRC.
    * Use an {{{auth_permission}}} table similar to Web2Py 'full' for tables?
-   * Set within {{{000_config.py))), along with module permisisons?
+   * Set within {{{000_config.py))), along with module permissions?
+
  * A Developer needs to be able to restrict access to a record
   * Add 2 reusable {{{multiple=True}}} fields to each table which needs this: {{{reader_id}}} & {{{writer_id}}} combined as {{{permissions_id}}}