Changes between Version 27 and Version 28 of BluePrintAuthorization

Timestamp:

06/19/10 16:41:40 (14 years ago)

Author:

Fran Boon

Comment:

Caching

BluePrintAuthorization

@@ -76 +76 @@
         user_id = auth.user.id
         _memberships = db.auth_membership
-        memberships = db(_memberships.user_id == user_id).select(_memberships.group_id)
+        memberships = db(_memberships.user_id == user_id).select(_memberships.group_id, cache=(cache.ram, 60))
     except:
         memberships = None
@@ -120 +120 @@
         user_id = auth.user.id
         _memberships = db.auth_membership
-        memberships = db(_memberships.user_id == user_id).select(_memberships.group_id)
+        memberships = db(_memberships.user_id == user_id).select(_memberships.group_id, cache=(cache.ram, 60))
     except:
         memberships = None
@@ -135 +135 @@
     else:   
         # Option 1
-        #restriction = db(db.auth_permission.table_name == tablename).select(db.auth_permission.group_id, limitby=(0, 1)).first().group_id
+        #restriction = db(db.auth_permission.table_name == tablename).select(db.auth_permission.group_id, limitby=(0, 1), cache=(cache.ram, 60)).first().group_id
         #if restriction:
         #   authorised = False
@@ -207 +207 @@
    * Have a single checkbox for 'Restrict access' which then opens out the 2 fields.
 
+ * A Developer needs to be able to restrict access to a '''Field''':
+  * In model (for access by all controllers, such as sync):
+{{{
+try:
+    user_id = auth.user.id
+    _memberships = db.auth_membership
+    memberships = db(_memberships.user_id == user_id).select(_memberships.group_id, cache=(cache.ram, 60))
+except:
+    memberships = None
+
+roles = []
+for membership in memberships:
+    roles.append(membership.group_id)
+
+if 1 not in roles and myrole not in roles:
+    table.field.readable = False
+}}}
+   * NB If doing this then the roles checks inside {{{shn_has_permission()}}} & {{{shn_accessible_fields()}}} should be modified to read this global value
+
 === Specific Examples ===
  * A Person's Contacts shouldn't be visible by default.
@@ -212 +231 @@
    * Simply add the Authenticated group (2) to the table (or records in the table if using Option 3)
    * ~~This requires all authenticated users to be added to the 'Authenticated' group~~
-  * What if just some fields should be protected?
 
  * A Person's Subscriptions shouldn't be visible by default.