summaryrefslogtreecommitdiff
path: root/docs/narr/security.rst
AgeCommit message (Collapse)Author
2013-04-05fix some cross-referencesTshepang Lekhonkhobe
2013-03-22remove unused ignore-next-block directiveTshepang Lekhonkhobe
2013-03-18reorder some imports to be alphabeticalMichael Merickel
2013-03-18support acl as a callableMichael Merickel
2013-03-13consistency: use $VENV whenever virtualenv binaries are usedTshepang Lekhonkhobe
2013-03-10Merge pull request #903 from tshepang/patch-4Tres Seaver
capitalize
2013-03-10Merge pull request #902 from tshepang/patch-3Tres Seaver
change awkward sentence
2013-03-10capitalizeTshepang Lekhonkhobe
2013-03-10change awkward sentenceTshepang Lekhonkhobe
2013-03-09grammarTshepang Lekhonkhobe
2012-11-04merged SHA512AuthTktAuthenticationPolicy into AuthTktAuthenticationPolicyMichael Merickel
AuthTktAuthenticationPolicy now accepts a hashalg parameter and is no longer deprecated. Docs recommend overriding hashalg and using 'sha512'.
2012-11-04fix docs, upgrade tutorials, add change note, deprecate using ↵Chris McDonough
zope.deprecation instead of a warning, make hashalg arg a kwarg in certain cases in case someone (maybe me) is using nonapi function imports from authentication
2012-01-19fixes #398 .. mention only method-based authN configuration, remove ↵Chris McDonough
indications of constructor value
2011-10-06remove all reference to the paster command-line utilityChris McDonough
2011-09-07add squishy whats-unique section to introductionChris McDonough
2011-08-22- Use [app:main] instead of a pipeline in all scaffolds and tutorialsChris McDonough
and narrative docs. - Break out awkward description of PasteDeploy entry points from project chapter into its own Paste chapter.
2011-08-09Added the `pyramid.security.NO_PERMISSION_REQUIRED` constant.Michael Merickel
Removed the undocumented version from pyramid.interfaces.
2011-07-30Updated all of the docs to reflect the new pyramid.* settings prefix.Michael Merickel
2011-07-20add more index markersChris McDonough
2011-07-10Adding 'I' to example custom AuthenticationPolicy; it's an interface.ejo
2011-02-28Fix authentication policy example.Chris McDonough
Closes #137
2011-02-05fix conflictsChris McDonough
2011-02-02Wrong name for variableChris Beelby
2011-02-02Capitalization fixChris Beelby
2011-01-30remove reference to ZCML directives; doesnt work in printed bookChris McDonough
2011-01-27module name contractionsChris McDonough
2011-01-27fix dangling referencesChris McDonough
2011-01-27- Beef up documentation related to ``set_default_permission``: explicitlyChris McDonough
mention that default permissions also protect exception views.
2011-01-21- Slightly improved interface docs for ``IAuthorizationPolicy``.Chris McDonough
2011-01-18Merge https://github.com/Pylons/pyramidCasey Duncan
2011-01-18- Most references to ZCML in narrative chapters have been removed orChris McDonough
redirected to ``pyramid_zcml`` locations.
2011-01-15add missing wordCasey Duncan
2011-01-15XXX explain the authentication/authorization separate in pyramid. Confirm ↵Casey Duncan
this is correct XXX
2011-01-15slight clarificationCasey Duncan
2011-01-15reword security intro paragraphCasey Duncan
2011-01-15our => theCasey Duncan
2010-12-31Remove resource location chapter and move intro parts to url dispatch. The ↵Casey Duncan
new much ado about traversal chapter takes care of selling traversal now
2010-12-20BFG_ -> PYRAMID_Jamaludin Ahmad
2010-12-19context finding -> resource locationChris McDonough
2010-12-18model -> resource; resource -> assetChris McDonough
2010-12-09fix docs: pyramid.configuration -> pyramid.configChris McDonough
2010-11-28Normalized narrative doc, code with linenos while text+bash don'tBlaise Laflamme
2010-11-28Narrative doc cleanupBlaise Laflamme
2010-11-09- All references to Pyramid-the-application were changed from :mod:`pyramid`Chris McDonough
to :app:`Pyramid`. A custom role setting was added to ``docs/conf.py`` to allow for this. (internal)
2010-11-03de-zcml-ify various chapters and move ZCML to the declarative chapterChris McDonough
2010-10-29bfg_view -> view_configChris McDonough
2010-10-28sessioning docsChris McDonough
2010-10-26forward port of bugfix from bfg trunkChris McDonough
2010-10-25convert narrative docs to PyramidChris McDonough
2010-09-09FeaturesChris McDonough
-------- - In support of making it easier to configure applications which are "secure by default", a default permission feature was added. If supplied, the default permission is used as the permission string to all view registrations which don't otherwise name a permission. These APIs are in support of that: - A new constructor argument was added to the Configurator: ``default_permission``. - A new method was added to the Configurator: ``set_default_permission``. - A new ZCML directive was added: ``default_permission``. Documentation ------------- - Added documentation for the ``default_permission`` ZCML directive. - Added documentation for the ``default_permission`` constructor value and the ``set_default_permission`` method in the Configurator API documentation. - Added a new section to the "security" chapter named "Setting a Default Permission". - Document ``renderer_globals_factory`` and ``request_factory`` arguments to Configurator constructor.