[Repoze-dev] security changes...

2009-05-25 Thread Chris McDonough
Hi all, The current "security policy" abstraction in BFG is a bit brittle because it conflates authentication and authorization APIs. Thus we get things like "RepozeWhoIdentityInheritingACLSecurityPolicy" and "RemoteUserInheritingACLSecurityPolicy". I'd like to tease apart the bits of the cur

Re: [Repoze-dev] security changes...

2009-05-25 Thread Malthe Borch
2009/5/25 Chris McDonough : > So to the end of breaking them apart, I just wrote up a bit of science fiction > in code form.  Could you take a look at the below and let me know what you > think? It's very clear. In terms of style, for interfaces that represent would-be adapters, how do you feel

Re: [Repoze-dev] security changes...

2009-05-26 Thread Wichert Akkerman
Previously Chris McDonough wrote: > def remember(self, principal, token): > """ Return a set of headers suitable for 'remembering' the > principal on subsequent requests """ > > def forget(): > """ Return a set of headers suitable for 'forgetting' the >

Re: [Repoze-dev] security changes...

2009-05-26 Thread Chris McDonough
On 5/26/09 1:50 AM, Malthe Borch wrote: > 2009/5/25 Chris McDonough: >> So to the end of breaking them apart, I just wrote up a bit of science >> fiction >> in code form. Could you take a look at the below and let me know what you >> think? > > It's very clear. Cool. I've implemented most of i

Re: [Repoze-dev] security changes...

2009-05-26 Thread Chris McDonough
On 5/26/09 3:52 AM, Wichert Akkerman wrote: > Previously Chris McDonough wrote: >> def remember(self, principal, token): >> """ Return a set of headers suitable for 'remembering' the >> principal on subsequent requests """ >> >> def forget(): >> """ Return

Re: [Repoze-dev] security changes...

2009-05-26 Thread Wichert Akkerman
Previously Chris McDonough wrote: > On 5/26/09 3:52 AM, Wichert Akkerman wrote: > > Previously Chris McDonough wrote: > >> def remember(self, principal, token): > >> """ Return a set of headers suitable for 'remembering' the > >> principal on subsequent requests """ > >> >

Re: [Repoze-dev] security changes...

2009-05-26 Thread Chris McDonough
On 5/26/09 4:07 AM, Chris McDonough wrote: > On 5/26/09 3:52 AM, Wichert Akkerman wrote: >> Previously Chris McDonough wrote: >>>def remember(self, principal, token): >>>""" Return a set of headers suitable for 'remembering' the >>>principal on subsequent requests ""

Re: [Repoze-dev] security changes...

2009-05-26 Thread Wichert Akkerman
Previously Chris McDonough wrote: > On 5/26/09 4:07 AM, Chris McDonough wrote: > > On 5/26/09 3:52 AM, Wichert Akkerman wrote: > >> Previously Chris McDonough wrote: > >>>def remember(self, principal, token): > >>>""" Return a set of headers suitable for 'remembering' the > >>>

Re: [Repoze-dev] security changes...

2009-05-26 Thread Chris McDonough
On 5/26/09 4:16 AM, Wichert Akkerman wrote: > Previously Chris McDonough wrote: >> On 5/26/09 3:52 AM, Wichert Akkerman wrote: >>> Previously Chris McDonough wrote: def remember(self, principal, token): """ Return a set of headers suitable for 'remembering' the

Re: [Repoze-dev] security changes...

2009-05-26 Thread Chris McDonough
On 5/26/09 4:20 AM, Wichert Akkerman wrote: >> from repoze.bfg.security import logout >> >> def someview(context, request): >> response = render_template_to_response('some.pt') >> logout(response) >> return response >> >> vs. >> >> from repoze.bfg.security import forget >> >> def

Re: [Repoze-dev] security changes...

2009-05-26 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wichert Akkerman wrote: > Previously Chris McDonough wrote: >> def remember(self, principal, token): >> """ Return a set of headers suitable for 'remembering' the >> principal on subsequent requests """ >> >> def forget(): >