summaryrefslogtreecommitdiff
path: root/repoze/bfg/wsgiadapter.py
diff options
context:
space:
mode:
authorChris McDonough <chrism@agendaless.com>2008-07-16 10:32:08 +0000
committerChris McDonough <chrism@agendaless.com>2008-07-16 10:32:08 +0000
commit2466f6eaa2246598dc6cb3c962364773eb4cc64a (patch)
tree80954892ad8e12cffb534f3ae92cd321d4d870f5 /repoze/bfg/wsgiadapter.py
parent23aa82c4963dc75737d7dc8a84d7639775c3b282 (diff)
downloadpyramid-2466f6eaa2246598dc6cb3c962364773eb4cc64a.tar.gz
pyramid-2466f6eaa2246598dc6cb3c962364773eb4cc64a.tar.bz2
pyramid-2466f6eaa2246598dc6cb3c962364773eb4cc64a.zip
Add security.
Diffstat (limited to 'repoze/bfg/wsgiadapter.py')
-rw-r--r--repoze/bfg/wsgiadapter.py16
1 files changed, 2 insertions, 14 deletions
diff --git a/repoze/bfg/wsgiadapter.py b/repoze/bfg/wsgiadapter.py
index c2d51a799..d114dd67e 100644
--- a/repoze/bfg/wsgiadapter.py
+++ b/repoze/bfg/wsgiadapter.py
@@ -1,20 +1,14 @@
from zope.component import queryMultiAdapter
+from zope.component import queryUtility
from zope.interface import classProvides
from zope.interface import implements
from zope.interface import Interface
from repoze.bfg.interfaces import IWSGIApplicationFactory
from repoze.bfg.interfaces import IWSGIApplication
+from repoze.bfg.interfaces import ISecurityPolicy
from repoze.bfg.mapply import mapply
-class IViewSecurityPolicy(Interface):
- """ Marker interface for a view security policy; a view security
- policy. """
- def __call__():
- """ Return None if the security check succeeded,
- otherwise it should return a WSGI application representing an
- unauthorized view"""
-
def isResponse(ob):
if ( hasattr(ob, 'app_iter') and hasattr(ob, 'headerlist') and
hasattr(ob, 'status') ):
@@ -36,12 +30,6 @@ class NaiveWSGIViewAdapter:
context = self.context
request = self.request
view = self.view
- security_policy = queryMultiAdapter((context, request),
- IViewSecurityPolicy)
- if security_policy:
- failed_view = security_policy()
- if failed_view:
- view = failed_view
catch_response = []
def replace_start_response(status, headers):