[Wiki] L'action denied n'est plus utile pour gérer les ACL

This commit is contained in:
Jordan Delorme 2015-08-06 12:06:59 +02:00
parent 8a08dc2cc1
commit 6648b2e009

View file

@ -44,7 +44,7 @@ class PublicCategories(AnonymousAuth):
page = Page(request, pagename) page = Page(request, pagename)
acl = page.getACL(request) acl = page.getACL(request)
if acl.acl and [a[0] for a in acl.acl if a[0] == 'All' and a[1].get('read',False)]: if acl.acl and [a[0] for a in acl.acl if a[0] == 'All' and a[1].get('read',False)]:
sys.stderr.write("acl All:read\n") sys.stderr.write("acl +All:read\n")
return False return False
categories = page.getCategories(request) categories = page.getCategories(request)
if categories: if categories:
@ -71,7 +71,7 @@ class PublicCategories(AnonymousAuth):
url = urlparse.urlunparse(('https', p.netloc, p.path, "", "", "")) url = urlparse.urlunparse(('https', p.netloc, p.path, "", "", ""))
action = request.args.get("action", "") action = request.args.get("action", "")
# pas de redirection si action est déjà deny ou que l'utilisateur se connecte # pas de redirection si action est déjà deny ou que l'utilisateur se connecte
if action not in [ "deny", "login"]: # if action not in [ "deny", "login"]:
request.http_redirect(url + "?action=deny") # request.http_redirect(url + "?action=deny")
return user_obj, cont return user_obj, cont