Edgewall Software

Ticket #8445: authz_policy.py.patch

File authz_policy.py.patch, 609 bytes (added by admin@…, 2 years ago)

patch for empty resource

Line 
1*** authz_policy.py     2009-11-24 19:46:42.000000000 +1300
2--- authz_policy2.py    2009-11-24 19:46:08.000000000 +1300
3***************
4*** 204,213 ****
5      def authz_permissions(self, resource_key, username):
6          # TODO: Handle permission negation in sections. eg. "if in this
7          # ticket, remove TICKET_MODIFY"
8-         if resource_key == '':
9-               resource_key = '*@*'
10-               self.env.log.debug('Empty resource_key')
11-
12          valid_users = ['*', 'anonymous']
13          if username and username != 'anonymous':
14              valid_users += ['authenticated', username]
15--- 204,209 ----