Changes between Version 7 and Version 8 of AuthFramework

Timestamp:

Aug 6, 2008, 8:42:55 PM (16 years ago)

Author:

cmlenz

Comment:

--

AuthFramework

@@ -28 +28 @@
 
 The current branch defines an `AuthMixIn` class that auth-enabled applications are supposed to subclass. It adds a couple of method stubs to the `Application` class, and contributes a [wiki:RequestFilters request filter] that performs authentication.
+
+A concrete application would inherit from `AuthMixIn` in addition to being derived from [wiki:ApplicationObject Application], and would probably want to implement two methods for handling the domain-specific details of identifying users and controlling their access to certain actions and/or resources. For example:
+
+{{{
+#!python
+class MyApp(Application, AuthMixIn):
+    ...
+
+    def authenticate(self, username, password=None):
+        return User.find(name=username)
+
+    def is_authorized(self, principal, action=None, resource=None):
+        if action:
+            return action in principal.permissions
+        return True
+}}}
 
 === Filters Refactoring ===