Changeset 5187 for TI12-security
- Timestamp:
- 08/04/09 15:55:47 (12 years ago)
- Location:
- TI12-security/trunk/python
- Files:
-
- 4 edited
Legend:
- Unmodified
- Added
- Removed
-
TI12-security/trunk/python/ndg.security.common/ndg/security/common/authz/msi.py
r5186 r5187 87 87 resource.parse(root) 88 88 return resource 89 90 def __str__(self): 91 return str(self.uriPattern) 89 92 90 93 class _AttrDict(dict): -
TI12-security/trunk/python/ndg.security.server/ndg/security/server/wsgi/authz/__init__.py
r5186 r5187 92 92 # Policy Decision Point 93 93 policyCfg = AuthorizationHandler._filterKeywords(app_conf, 'policy.') 94 self.policyFilePath = policyCfg['filePath'] 94 95 self.policy = Policy.Parse(policyCfg['filePath']) 95 96 self.pdp = PDP(self.policy, pip) … … 123 124 # No match - it's publicly accessible 124 125 return False 126 127 log.debug("AuthorizationHandler found matching target(s):\n\n " 128 "%s\nfrom policy file [%s] for URI=[%s]" % 129 ('\n'.join(["RegEx=%s" % t for t in matchingTargets]), 130 self.policyFilePath, 131 resourceURI)) 125 132 126 133 if not self.isAuthenticated: … … 145 152 # Skip the access forbidden middleware and call the next next 146 153 # WSGI app 147 log.debug("AuthorizationHandler access granted for policy") 154 log.debug("AuthorizationHandler access granted to [%s] using " 155 "policy [%s]" % (resourceURI, self.policyFilePath)) 148 156 return False 149 157 else: -
TI12-security/trunk/python/ndg.security.server/ndg/security/server/wsgi/openid/provider/__init__.py
r5168 r5187 1089 1089 # possibly via FetchRequest.getRequiredAttrs() 1090 1090 try: 1091 self.axResponse(ax_req, ax_resp, self. authNInterfaceCtx)1091 self.axResponse(ax_req, ax_resp, self._authN) 1092 1092 1093 1093 except OpenIDProviderMissingRequiredAXAttrs, e: -
TI12-security/trunk/python/ndg.security.test/ndg/security/test/integration/authz/policy.xml
r5186 r5187 13 13 </Target> 14 14 <Target> 15 <URIPattern> /test_accessDeniedToSecuredURI</URIPattern>15 <URIPattern>^/test_accessDenied.*$</URIPattern> 16 16 <Attributes> 17 17 <Attribute>urn:siteA:security:authz:1.0:attr:forbidden</Attribute>
Note: See TracChangeset
for help on using the changeset viewer.