Add a plug point for a security policy.

1 files changed, 5 insertions, 0 deletions

diff --git a/repoze/bfg/interfaces.py b/repoze/bfg/interfaces.py
index 803cf237a..b0b769b02 100644
--- a/repoze/bfg/interfaces.py
+++ b/repoze/bfg/interfaces.py
@@ -11,6 +11,11 @@ class IRootPolicy(Interface):
 class ITraversalPolicy(Interface):
     def __call__(environ, root):
         """ Return a tuple in the form (context, name, subpath) """
+
+class ISecurityPolicy(Interface):
+    def __call__(environ, context, name):
+        """ Return a WSGI app on unauthorized or None to signify that
+        the request is allowed to continue """
         
 class ITraverser(Interface):
     def __init__(context):