summaryrefslogtreecommitdiff
path: root/docs/narr/security.rst
AgeCommit message (Collapse)Author
2011-10-06remove all reference to the paster command-line utilityChris McDonough
2011-09-07add squishy whats-unique section to introductionChris McDonough
2011-08-22- Use [app:main] instead of a pipeline in all scaffolds and tutorialsChris McDonough
and narrative docs. - Break out awkward description of PasteDeploy entry points from project chapter into its own Paste chapter.
2011-08-09Added the `pyramid.security.NO_PERMISSION_REQUIRED` constant.Michael Merickel
Removed the undocumented version from pyramid.interfaces.
2011-07-30Updated all of the docs to reflect the new pyramid.* settings prefix.Michael Merickel
2011-07-20add more index markersChris McDonough
2011-07-10Adding 'I' to example custom AuthenticationPolicy; it's an interface.ejo
2011-02-28Fix authentication policy example.Chris McDonough
Closes #137
2011-02-05fix conflictsChris McDonough
2011-02-02Wrong name for variableChris Beelby
2011-02-02Capitalization fixChris Beelby
2011-01-30remove reference to ZCML directives; doesnt work in printed bookChris McDonough
2011-01-27module name contractionsChris McDonough
2011-01-27fix dangling referencesChris McDonough
2011-01-27- Beef up documentation related to ``set_default_permission``: explicitlyChris McDonough
mention that default permissions also protect exception views.
2011-01-21- Slightly improved interface docs for ``IAuthorizationPolicy``.Chris McDonough
2011-01-18Merge https://github.com/Pylons/pyramidCasey Duncan
2011-01-18- Most references to ZCML in narrative chapters have been removed orChris McDonough
redirected to ``pyramid_zcml`` locations.
2011-01-15add missing wordCasey Duncan
2011-01-15XXX explain the authentication/authorization separate in pyramid. Confirm ↵Casey Duncan
this is correct XXX
2011-01-15slight clarificationCasey Duncan
2011-01-15reword security intro paragraphCasey Duncan
2011-01-15our => theCasey Duncan
2010-12-31Remove resource location chapter and move intro parts to url dispatch. The ↵Casey Duncan
new much ado about traversal chapter takes care of selling traversal now
2010-12-20BFG_ -> PYRAMID_Jamaludin Ahmad
2010-12-19context finding -> resource locationChris McDonough
2010-12-18model -> resource; resource -> assetChris McDonough
2010-12-09fix docs: pyramid.configuration -> pyramid.configChris McDonough
2010-11-28Normalized narrative doc, code with linenos while text+bash don'tBlaise Laflamme
2010-11-28Narrative doc cleanupBlaise Laflamme
2010-11-09- All references to Pyramid-the-application were changed from :mod:`pyramid`Chris McDonough
to :app:`Pyramid`. A custom role setting was added to ``docs/conf.py`` to allow for this. (internal)
2010-11-03de-zcml-ify various chapters and move ZCML to the declarative chapterChris McDonough
2010-10-29bfg_view -> view_configChris McDonough
2010-10-28sessioning docsChris McDonough
2010-10-26forward port of bugfix from bfg trunkChris McDonough
2010-10-25convert narrative docs to PyramidChris McDonough
2010-09-09FeaturesChris McDonough
-------- - In support of making it easier to configure applications which are "secure by default", a default permission feature was added. If supplied, the default permission is used as the permission string to all view registrations which don't otherwise name a permission. These APIs are in support of that: - A new constructor argument was added to the Configurator: ``default_permission``. - A new method was added to the Configurator: ``set_default_permission``. - A new ZCML directive was added: ``default_permission``. Documentation ------------- - Added documentation for the ``default_permission`` ZCML directive. - Added documentation for the ``default_permission`` constructor value and the ``set_default_permission`` method in the Configurator API documentation. - Added a new section to the "security" chapter named "Setting a Default Permission". - Document ``renderer_globals_factory`` and ``request_factory`` arguments to Configurator constructor.
2010-09-05- Each of the follow methods of the Configurator now allow theChris McDonough
below-named arguments to be passed as "dotted name strings" (e.g. "foo.bar.baz") rather than as actual implementation objects that must be imported: setup_registry root_factory, authentication_policy, authorization_policy, debug_logger, locale_negotiator, request_factory, renderer_globals_factory add_subscriber subscriber, iface derive_view view add_view view, for_, context, request_type, containment add_route() view, view_for, factory, for_, view_context scan package add_renderer factory set_forbidden_view view set_notfound_view view set_request_factory factory set_renderer_globals_factory() factory set_locale_negotiator negotiator testing_add_subscriber event_iface
2010-03-22The security chapter had a few more typos than the others. Someone had ↵Carlos de la Guardia
clearly had a beer too many when he started to write section 15.15 ;)
2010-03-15Fix from Douglas Cerna.Chris McDonough
2010-03-02normalize case for http_only zcml directive defaultDaniel Holth
2010-02-03Bug FixesChris McDonough
--------- - Ensure that ``secure`` flag for AuthTktAuthenticationPolicy constructor does what it's documented to do (merge Daniel Holth's fancy-cookies-2 branch). New Features ------------ - Add ``path`` and ``http_only`` options to AuthTktAuthenticationPolicy constructor (merge Daniel Holth's fancy-cookies-2 branch).
2010-01-18Prep for b1Chris McDonough
Merge a bunch of paper-based docs fixes Configure logging during bfgshell.
2010-01-17More reviews finished.Chris McDonough
2010-01-17More pass overhaul based on making contextfinding explicit within documentation.Chris McDonough
2010-01-16Massive overhaul to deal with the reality that we don't map URLs directly to ↵Chris McDonough
code.
2010-01-11Merge of andrew-docs branch.Chris McDonough
2010-01-04(no commit message)Chris McDonough
2010-01-04(no commit message)Chris McDonough
2010-01-03FeaturesChris McDonough
-------- - The ``Configurator.add_view`` method now accepts an argument named ``context``. This is an alias for the older argument named ``for_``; it is preferred over ``for_``, but ``for_`` will continue to be supported "forever". - The ``view`` ZCML directive now accepts an attribute named ``context``. This is an alias for the older attribute named ``for``; it is preferred over ``for``, but ``for`` will continue to be supported "forever". - The ``Configurator.add_route`` method now accepts an argument named ``view_context``. This is an alias for the older argument named ``view_for``; it is preferred over ``view_for``, but ``view_for`` will continue to be supported "forever". - The ``route`` ZCML directive now accepts an attribute named ``view_context``. This is an alias for the older attribute named ``view_for``; it is preferred over ``view_for``, but ``view_for`` will continue to be supported "forever". Documentation and Paster Templates ---------------------------------- - All uses of the ``Configurator.add_view`` method that used its ``for_`` argument now use the ``context``argument instead. - All uses of the ``Configurator.add_route`` method that used its ``view_for`` argument now use the ``view_context``argument instead. - All uses of the ``view`` ZCML directive that used its ``for`` attribute now use the ``context`` attribute instead. - All uses of the ``route`` ZCML directive that used its ``view_for`` attribute now use the ``view_context`` attribute instead.
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-26 02:58:38 +0000