summaryrefslogtreecommitdiff
path: root/repoze/bfg/security.py
diff options
context:
space:
mode:
Diffstat (limited to 'repoze/bfg/security.py')
-rw-r--r--repoze/bfg/security.py9
1 files changed, 6 insertions, 3 deletions
diff --git a/repoze/bfg/security.py b/repoze/bfg/security.py
index 90916bac2..bd1edaf6d 100644
--- a/repoze/bfg/security.py
+++ b/repoze/bfg/security.py
@@ -8,6 +8,8 @@ from repoze.bfg.interfaces import ISecurityPolicy
from repoze.bfg.interfaces import IViewPermission
from repoze.bfg.interfaces import IViewPermissionFactory
+from repoze.bfg.wsgi import Unauthorized as UnauthorizedApp
+
Everyone = 'system.Everyone'
Authenticated = 'system.Authenticated'
Allow = 'Allow'
@@ -145,6 +147,8 @@ class ACLSecurityPolicy(object):
return []
+ forbidden = UnauthorizedApp
+
class InheritingACLSecurityPolicy(object):
""" A security policy which uses ACLs in the following ways:
@@ -268,6 +272,8 @@ class InheritingACLSecurityPolicy(object):
return allowed
+ forbidden = UnauthorizedApp
+
def get_remoteuser(request):
user_id = request.environ.get('REMOTE_USER')
if user_id:
@@ -595,6 +601,3 @@ class ViewPermissionFactory(object):
class Unauthorized(Exception):
pass
-
-
-