Changes between Version 83 and Version 84 of BluePrintAuthorization

Timestamp:

06/22/10 15:00:39 (14 years ago)

Author:

Fran Boon

Comment:

Use shn_has_role for function restriction

BluePrintAuthorization

@@ -93 +93 @@
 
 === Function restriction ===
- * ~~Decorator function : @auth.requires_membership("Administrator")~~
-  * doesn't support OR, doesn't support NOT
-  * not efficient now we have {{{session.s3.roles}}}
- * We need a function which efficiently handles OR, AND & NOT. With roles cached in session, this should be easy:
+ * Decorator function:
+  * ~~@auth.requires_membership("Administrator")~~
+   * doesn't support OR, doesn't support NOT
+   * not efficient now we have {{{session.s3.roles}}}
+ * We need a function which efficiently handles OR, AND & NOT. With roles cached in session, this is easy:
 {{{
 def myfunction():
-    roles = session.s3.roles
-    if not 1 in roles or (deployment_settings.auth.roles["BadRole1"] in roles and deployment_settings.auth.roles["BadRole2"] in roles) and not deployment_settings.auth.roles["GoodRole"] in roles:
+    if not shn_has_role(1) or (shn_has_role("BadRole1") and shn_has_role("BadRole2")) and not shn_has_role("GoodRole"):
         # redirect out
     ...