Changeset 5187 for TI12-security

Timestamp:

08/04/09 15:55:47 (11 years ago)

Author:

pjkersha

Message:

Tested Policy with regex target URIs

Location:

TI12-security/trunk/python

Files:

• ndg.security.common/ndg/security/common/authz/msi.py (modified) (1 diff)
• ndg.security.server/ndg/security/server/wsgi/authz/__init__.py (modified) (3 diffs)
• ndg.security.server/ndg/security/server/wsgi/openid/provider/__init__.py (modified) (1 diff)
• ndg.security.test/ndg/security/test/integration/authz/policy.xml (modified) (1 diff)

TI12-security/trunk/python/ndg.security.common/ndg/security/common/authz/msi.py

@@ -87 +87 @@
         resource.parse(root)
         return resource
+    
+    def __str__(self):
+        return str(self.uriPattern)
 
 class _AttrDict(dict):

TI12-security/trunk/python/ndg.security.server/ndg/security/server/wsgi/authz/__init__.py

@@ -92 +92 @@
         # Policy Decision Point
         policyCfg = AuthorizationHandler._filterKeywords(app_conf, 'policy.')
+        self.policyFilePath = policyCfg['filePath']
         self.policy = Policy.Parse(policyCfg['filePath'])
         self.pdp = PDP(self.policy, pip)
@@ -123 +124 @@
                 # No match - it's publicly accessible
                 return False
+
+        log.debug("AuthorizationHandler found matching target(s):\n\n "
+                  "%s\nfrom policy file [%s] for URI=[%s]" % 
+                  ('\n'.join(["RegEx=%s" % t for t in matchingTargets]), 
+                   self.policyFilePath,
+                   resourceURI))
         
         if not self.isAuthenticated:
@@ -145 +152 @@
                 # Skip the access forbidden middleware and call the next next
                 # WSGI app
-                log.debug("AuthorizationHandler access granted for policy")
+                log.debug("AuthorizationHandler access granted to [%s] using "
+                          "policy [%s]" % (resourceURI, self.policyFilePath))
                 return False
         else:

TI12-security/trunk/python/ndg.security.server/ndg/security/server/wsgi/openid/provider/__init__.py

@@ -1089 +1089 @@
         # possibly via FetchRequest.getRequiredAttrs()
         try:
-            self.axResponse(ax_req, ax_resp, self.authNInterfaceCtx)
+            self.axResponse(ax_req, ax_resp, self._authN)
             
         except OpenIDProviderMissingRequiredAXAttrs, e:

TI12-security/trunk/python/ndg.security.test/ndg/security/test/integration/authz/policy.xml

@@ -13 +13 @@
     </Target>
     <Target>
-        <URIPattern>/test_accessDeniedToSecuredURI</URIPattern>
+        <URIPattern>^/test_accessDenied.*$</URIPattern>
         <Attributes>
             <Attribute>urn:siteA:security:authz:1.0:attr:forbidden</Attribute>