From 2466f6eaa2246598dc6cb3c962364773eb4cc64a Mon Sep 17 00:00:00 2001 From: Chris McDonough Date: Wed, 16 Jul 2008 10:32:08 +0000 Subject: Add security. --- repoze/bfg/wsgiadapter.py | 16 ++-------------- 1 file changed, 2 insertions(+), 14 deletions(-) (limited to 'repoze/bfg/wsgiadapter.py') diff --git a/repoze/bfg/wsgiadapter.py b/repoze/bfg/wsgiadapter.py index c2d51a799..d114dd67e 100644 --- a/repoze/bfg/wsgiadapter.py +++ b/repoze/bfg/wsgiadapter.py @@ -1,20 +1,14 @@ from zope.component import queryMultiAdapter +from zope.component import queryUtility from zope.interface import classProvides from zope.interface import implements from zope.interface import Interface from repoze.bfg.interfaces import IWSGIApplicationFactory from repoze.bfg.interfaces import IWSGIApplication +from repoze.bfg.interfaces import ISecurityPolicy from repoze.bfg.mapply import mapply -class IViewSecurityPolicy(Interface): - """ Marker interface for a view security policy; a view security - policy. """ - def __call__(): - """ Return None if the security check succeeded, - otherwise it should return a WSGI application representing an - unauthorized view""" - def isResponse(ob): if ( hasattr(ob, 'app_iter') and hasattr(ob, 'headerlist') and hasattr(ob, 'status') ): @@ -36,12 +30,6 @@ class NaiveWSGIViewAdapter: context = self.context request = self.request view = self.view - security_policy = queryMultiAdapter((context, request), - IViewSecurityPolicy) - if security_policy: - failed_view = security_policy() - if failed_view: - view = failed_view catch_response = [] def replace_start_response(status, headers): -- cgit v1.2.3