1 # -*- coding: iso-8859-1 -*-
   2 """
   3     MoinMoin - Wiki Security Interface
   4 
   5     This implements the basic interface for user permissions and
   6     system policy. If you want to define your own policy, inherit
   7     from the base class 'Permissions', so that when new permissions
   8     are defined, you get the defaults.
   9 
  10     Then assign your new class to "SecurityPolicy" in wikiconfig;
  11     and I mean the class, not an instance of it!
  12 
  13     @copyright: 2000-2004 by Jürgen Hermann <jh@web.de>
  14     @license: GNU GPL, see COPYING for details.
  15 """
  16 
  17 #############################################################################
  18 ### Basic Permissions Interface -- most features enabled by default
  19 #############################################################################
  20 
  21 
  22 class Permissions:
  23     """ Basic interface for user permissions and system policy.
  24 
  25         Note that you still need to allow some of the related actions, this
  26         just controls their behaviour, not their activation.
  27     """
  28 
  29     def __init__(self, user):
  30         """ Calculate the permissons `user` has.
  31         """
  32         from MoinMoin.Page import Page
  33         self.Page = Page
  34         self.name = user.name
  35         self.request = user._request
  36 
  37     def save(self, editor, newtext, rev, **kw):
  38         """ Check whether user may save a page.
  39 
  40             `editor` is the PageEditor instance, the other arguments are
  41             those of the `PageEditor.saveText` method.
  42         """
  43         return self.write(editor.page_name)
  44 
  45     def __getattr__(self, attr):
  46         request = self.request
  47         Page = self.Page
  48 
  49         # check right in security_rules
  50         for s in request.cfg.security_rules:
  51             # Make Sure the SecurityRules have 'rule' and attr
  52             # and the SecurityRules is a Dict.
  53             try:
  54                 if s.has_key('rule') and s.has_key(attr):
  55                    valid_security_rule = 1
  56                 else:
  57                    valid_security_rule = 0
  58             except AttributeError:
  59                 valid_security_rule = 0
  60             if valid_security_rule:
  61                 sr = s['rule']
  62                 security_rule = sr(request.user, s)
  63                 # Check dict again, Is it developer like ?
  64                 if security_rule.check_dict(attr):
  65                     return lambda pagename, **kw: getattr(security_rule, attr)(pagename, **kw)
  66 
  67         # If cann't check in security_rules, try it in moin_acl
  68         if attr in request.cfg.acl_rights_valid:
  69             return lambda pagename, Page=Page, request=request, attr=attr: Page(request, pagename).getACL(request).may(request, self.name, attr)
  70         else:
  71             raise AttributeError, attr
  72         
  73 
  74 # make an alias for the default policy
  75 Default = Permissions

   1 # -*- coding: iso-8859-1 -*-
   2 """
   3 @copyright: (c) Bastian Blank, Florian Festi, Thomas Waldmann
   4 @copyright: MoinMoin:FrankieChow
   5 @license: GNU GPL, see COPYING for details.
   6 """
   7 
   8 class security_rules_obj:
   9     """ Template of SecurityRules Object
  10     """
  11 
  12     def __init__(self, user, dict):
  13         """ Calculate the permissons `user` has.
  14         """
  15         self.user = user
  16         self.name = user.name
  17         self.request = user._request
  18         self.dict = dict
  19 
  20     def cal_rule_result(self):
  21         """ Cal the dict('is_non') and set the rule_result.
  22         """
  23         if self.dict.has_key('is_non'):
  24             self.rule_result = self.dict['is_non'] * self.match_rule()
  25         else:
  26             self.rule_result = self.match_rule()
  27 
  28     def check_dict(self):
  29         """
  30         Developer can override it to check pass dict.
  31         """
  32         self.cal_rule_result()
  33         if getattr(self, attr, 0):
  34             return 1
  35 
  36     def true(self, pagename, **kw):
  37         return 1
  38     def false(self, pagename, **kw):
  39         return 0
  40 
  41     def __getattr__(self, attr):
  42         if not self.rule_result: raise AttributeError, attr
  43         if self.dict[attr]:
  44             return lambda pagename, **kw: self.true(pagename, **kw)
  45         else:
  46             return lambda pagename, **kw: self.false(pagename, **kw)
  47 
  48 class vaild_user(security_rules_obj):
  49     """
  50     Maybe Developer must need to write this module.
  51     """
  52     def match_rule(self):
  53         if self.user.valid:
  54             return 1
  55         else:
  56             return 0