Changes between Version 107 and Version 108 of S3/S3AAA

Timestamp:

06/13/14 12:00:10 (10 years ago)

Author:

MattS

Comment:

syntax highlighting

S3/S3AAA

@@ -197 +197 @@
 To configure the system-wide policy to use ACLs, set {{{security.policy}}} to:
 
-{{{
+{{{#!python
 settings.security.policy = 3 # Apply Controller ACLs
 }}}
@@ -203 +203 @@
 or:
 
-{{{
+{{{#!python
 settings.security.policy = 4 # Apply both Controller and Function ACLs
 }}}
@@ -209 +209 @@
 or:
 
-{{{
+{{{#!python
 settings.security.policy = 5 # Apply Controller, Function and Table ACLs
 }}}
@@ -219 +219 @@
 This can be done by setting the respective controller to {{{restricted=True}}} in {{{deployment_settings.modules}}} ({{{models/000_config.py}}}):
 
-{{{
+{{{#!python
     dvi = Storage(
             name_nice = T("Disaster Victim Identification"),
@@ -267 +267 @@
 To check permissions to access a table (or a particular record) with a certain method, use the {{{auth.s3_has_permission()}}} method:
 
-{{{
+{{{#!python
 authorised = auth.s3_has_permission("read", db.my_table)
 if authorised:
@@ -273 +273 @@
 }}}
 
-{{{
+{{{#!python
 authorised = auth.s3_has_permission("read", db.my_table, record_id=x)
 if authorised:
@@ -289 +289 @@
 You can build a query for all records in a table which are accessible for the current user with a certain method, by using {{{auth.s3_accessible_query}}}:
 
-{{{
+{{{#!python
 # Define your query:
 query = ...
@@ -317 +317 @@
 All this is covered by the {{{auth.permission.fail()}}} method:
 
-{{{
+{{{#!python
 authorised = auth.shn_has_permission("delete", db.my_table)
 if not authorised:
@@ -330 +330 @@
 Example: redirect to {{{my/index}}} rather than to {{{default/index}}} in case of insufficient privileges of an authenticated user:
 
-{{{
+{{{#!python
 authorised = auth.shn_has_permission("delete", db.my_table)
 if not authorised: