Current File : //opt/alt/python27/lib/python2.7/site-packages/paste/auth/grantip.pyc
�
a�Nc @ s< d Z d d l m Z d e f d � � YZ e d � Z d S( s-
Grant roles and logins based on IP address.
i����( t ip4t GrantIPMiddlewarec B s5 e Z d Z e d � Z d � Z d � Z d � Z RS( s
On each request, ``ip_map`` is checked against ``REMOTE_ADDR``
and logins and roles are assigned based on that.
``ip_map`` is a map of {ip_mask: (username, roles)}. Either
``username`` or ``roles`` may be None. Roles may also be prefixed
with ``-``, like ``'-system'`` meaning that role should be
revoked. ``'__remove__'`` for a username will remove the username.
If ``clobber_username`` is true (default) then any user
specification will override the current value of ``REMOTE_USER``.
``'__remove__'`` will always clobber the username.
``ip_mask`` is something that `paste.util.ip4:IP4Range
<class-paste.util.ip4.IP4Range.html>`_ can parse. Simple IP
addresses, IP/mask, ip<->ip ranges, and hostnames are allowed.
c C so | | _ g | _ xM | j � D]? \ } } | j j t j | � | j | d | d � f � q W| | _ d S( Ni i ( t appt ip_mapt itemst appendR t IP4Ranget _convert_user_rolet clobber_username( t selfR R R t keyt value( ( sC /opt/alt/python27/lib/python2.7/site-packages/paste/auth/grantip.pyt __init__ s "c C s1 | r' t | t � r' | j d � } n | | f S( Nt ,( t
isinstancet
basestringt split( R t usernamet roles( ( sC /opt/alt/python27/lib/python2.7/site-packages/paste/auth/grantip.pyR $ s c C s� t j | d t � } t } g } x� | j D]{ \ } \ } } | | k r, | r` | j | � n | d k ru t } q� | r� | j d � s� | j r� | | d <q� q� q, q, W| r� d | k r� | d =n | r� | j | | � n | j | | � S( Nt REMOTE_ADDRt
__remove__t REMOTE_USER(
R t ip2intt FalseR t extendt Truet getR t
_set_rolesR ( R t environt start_responset addrt remove_usert add_rolest rangeR R ( ( sC /opt/alt/python27/lib/python2.7/site-packages/paste/auth/grantip.pyt __call__) s$
c C s� | j d d � j d � } t d | � } g } xM | D]E } | j d � r` | j | d � q7 | | k r7 | j | � q7 q7 Wx* | D]" } | | k r� | j | � q� q� Wd j | � | d <d S( Nt REMOTE_USER_TOKENSt R
t -i ( R R t filtert Nonet
startswithR t removet join( R R R t cur_rolest remove_rolest role( ( sC /opt/alt/python27/lib/python2.7/site-packages/paste/auth/grantip.pyR = s
( t __name__t
__module__t __doc__R R R R" R ( ( ( sC /opt/alt/python27/lib/python2.7/site-packages/paste/auth/grantip.pyR s
c
K s� d d l m } | | � } i } x� | j � D]s \ } } d | k rb | j d d � \ } } n | } d } | d k r� d } n | d k r� d } n | | | <q/ Wt | | | � S( s�
Grant roles or usernames based on IP addresses.
Config looks like this::
[filter:grant]
use = egg:Paste#grantip
clobber_username = true
# Give localhost system role (no username):
127.0.0.1 = -:system
# Give everyone in 192.168.0.* editor role:
192.168.0.0/24 = -:editor
# Give one IP the username joe:
192.168.0.7 = joe
# And one IP is should not be logged in:
192.168.0.10 = __remove__:-editor
i����( t asboolt :i R$ R% ( t paste.deploy.convertersR1 R R R (
R t global_confR t kwR1 R R
R R R- ( ( sC /opt/alt/python27/lib/python2.7/site-packages/paste/auth/grantip.pyt make_grantipN s N( R0 t
paste.utilR t objectR R R6 ( ( ( sC /opt/alt/python27/lib/python2.7/site-packages/paste/auth/grantip.pyt <module> s F
Mini Shell