Changeset 05191a6 for fedd/fedd/authorizer.py

Timestamp:

Dec 1, 2008 3:07:40 PM (15 years ago)

Author:

Ted Faber <faber@…>

Branches:

axis_example, compt_changes, info-ops, master, version-1.30, version-2.00, version-3.01, version-3.02

Children:

f816079

Parents:

f069052

Message:

All services use authorizer. Global authorization file, shared routine to read simple authorization files. Fixes some more partial state errors in experiment_control.

File:

• fedd/fedd/authorizer.py (modified) (4 diffs)

fedd/fedd/authorizer.py

@@ -14 +14 @@
     def __init__(self, def_attr="testbed"):
         self.attrs = { }
+        self.globals=set()
 
     @staticmethod
@@ -86 +87 @@
     def check_attribute(self, name, attr):
         """
-        Return True if name has attr.  Tuple names match any tuple name that
-        matches all names present and has None entries in other fileds.  For
-        tuple names True implies that there is a matching tuple name with the
-        attribute.
+        Return True if name has attr (or if attr is global).  Tuple names match
+        any tuple name that matches all names present and has None entries in
+        other fileds.  For tuple names True implies that there is a matching
+        tuple name with the attribute.
         """
         def tup(tup, i, p):
@@ -97 +98 @@
 
         self.valid_name(name)
+        if attr in self.globals:
+            return True
 
         if isinstance(name, tuple):
@@ -107 +110 @@
             return  attr in self.attrs.get(self.auth_name(name), set())
 
+    def set_global_attribute(self, attr):
+        """
+        Set a global attribute.  All names, even those otherwise unknown to the
+        authorizer have this attribute.
+        """
+        self.globals.add(attr)
 
+    def unset_global_attribute(self, attr):
+        """
+        Remove a global attribute
+        """
+
+        self.globals.discard(attr)
+