diff options
| author | Theron Luhn <theron@luhn.com> | 2019-02-17 12:23:27 -0800 |
|---|---|---|
| committer | Theron Luhn <theron@luhn.com> | 2019-02-17 12:29:36 -0800 |
| commit | e47e7f457a6143dda28f9dd1674c53b1ece67f9d (patch) | |
| tree | 584c87ced94463a8bbfa1d8b551baaf2fe4c8aaf /docs/glossary.rst | |
| parent | 753d596aa2c93bed1fc95fb71bbeef383646c2cb (diff) | |
| download | pyramid-e47e7f457a6143dda28f9dd1674c53b1ece67f9d.tar.gz pyramid-e47e7f457a6143dda28f9dd1674c53b1ece67f9d.tar.bz2 pyramid-e47e7f457a6143dda28f9dd1674c53b1ece67f9d.zip | |
Add `security policy` and `identity` to glossary.
Also mark authn/authz as deprecatd.
Diffstat (limited to 'docs/glossary.rst')
| -rw-r--r-- | docs/glossary.rst | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/docs/glossary.rst b/docs/glossary.rst index cd472a660..8a1d27734 100644 --- a/docs/glossary.rst +++ b/docs/glossary.rst @@ -306,6 +306,16 @@ Glossary a principal, but this is not strictly necessary in custom policies that define their principals differently. + identity + An identity is an opaque identifier of the user associated with the + current request. + + security policy + A security policy in :app:`Pyramid` terms is a bit of code which has an + API which identifies the user associated with the current request (perhaps + via a cookie or ``Authorization`` header) and determines whether or not + that user is permitted to access the requested resource. + authorization policy An authorization policy in :app:`Pyramid` terms is a bit of code which has an API which determines whether or not the @@ -313,11 +323,19 @@ Glossary associated with a permission, based on the information found on the :term:`context` resource. + .. deprecated:: 2.0 + Authorization policies have been deprecated in favor of a + :term:`security policy`. + authentication policy An authentication policy in :app:`Pyramid` terms is a bit of code which has an API which determines the current :term:`principal` (or principals) associated with a request. + .. deprecated:: 2.0 + Authentication policies have been deprecated in favor of a + :term:`security policy`. + WSGI `Web Server Gateway Interface <https://wsgi.readthedocs.io/en/latest/>`_. This is a Python standard for connecting web applications to web servers, |