deb-sahara/sahara/api/acl.py
Sergey Lukjanov 5b35bdffb5 Migrate to oslo.policy lib instead of copy-pasted oslo-incubator
The first official oslo.policy was released and so we're ready to
migrate from the copy-pasted oslo-incubator code to the separated
lib.

Change-Id: I8e404d2b622876389d9b1019ae50f1e1a8cecdf1
2015-04-06 10:13:51 +03:00

53 lines
1.4 KiB
Python

#
# Copyright (c) 2014 Mirantis Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
"""Policy Engine For Sahara"""
import functools
from keystonemiddleware import auth_token
from oslo_config import cfg
from oslo_policy import policy
from sahara import context
from sahara import exceptions
ENFORCER = None
def setup_policy():
global ENFORCER
ENFORCER = policy.Enforcer(cfg.CONF)
def enforce(rule):
def decorator(func):
@functools.wraps(func)
def handler(*args, **kwargs):
ctx = context.ctx()
ENFORCER.enforce(rule, {}, ctx.to_dict(), do_raise=True,
exc=exceptions.Forbidden)
return func(*args, **kwargs)
return handler
return decorator
def wrap(app):
"""Wrap wsgi application with ACL check."""
return auth_token.AuthProtocol(app, {})