Python AccessControl.SecurityManager类代码示例

 def testBoboTraverseToMethod(self):
     # Verify it's possible to use __bobo_traverse__ to a method.
     noSecurityManager()
     SecurityManager.setSecurityPolicy( self.oldPolicy )
     bb = BoboTraversable()
     self.failUnless(
         bb.restrictedTraverse('bb_method') is not bb.bb_method)

 def testBoboTraverseToSimpleAttrValue(self):
     # Verify it's possible to use __bobo_traverse__ to a simple
     # python value
     noSecurityManager()
     SecurityManager.setSecurityPolicy( self.oldPolicy )
     bb = BoboTraversable()
     self.assertEqual(bb.restrictedTraverse('bb_status'), 'screechy')

 def testDefaultValueWhenNotFound(self):
     # Test that traversing to a non-existent object returns
     # the default when provided
     noSecurityManager()
     SecurityManager.setSecurityPolicy( self.oldPolicy )
     self.assertEqual(
         self.root.restrictedTraverse('happy/happy', 'joy'), 'joy')

 def setUp( self ):
     get_transaction().begin()
     self._policy = UnitTestSecurityPolicy()
     SecurityManager.setSecurityPolicy(self._policy)
     self.connection = Zope.DB.open()
     self.root = self.connection.root()[ 'Application' ]
     newSecurityManager( None, UnitTestUser().__of__( self.root ) )

 def _setupSecurity(self, policy=None):
     from AccessControl import SecurityManager
     from AccessControl.SecurityManagement import noSecurityManager
     if policy is None:
         policy = self.oldPolicy
     noSecurityManager()
     SecurityManager.setSecurityPolicy(policy)

 def testTraverseThroughBoboTraverse(self):
     # Verify it's possible to use __bobo_traverse__ with the
     # Zope security policy.
     noSecurityManager()
     SecurityManager.setSecurityPolicy( self.oldPolicy )
     bb = BoboTraversable()
     self.failUnlessRaises(KeyError, bb.restrictedTraverse, 'notfound')
     bb.restrictedTraverse('bb_subitem')

 def testDefaultValueWhenUnathorized(self):
     # Test that traversing to an unauthorized object returns
     # the default when provided
     noSecurityManager()
     SecurityManager.setSecurityPolicy(CruelSecurityPolicy())
     newSecurityManager( None, UnitTestUser().__of__( self.root ) )
     self.root.stuff = 'stuff here'
     self.assertEqual(
         self.root.folder1.restrictedTraverse('stuff', 42), 42)

    def tearDown(self):
        noSecurityManager()
        SecurityManager.setSecurityPolicy(self.oldPolicy)
        del self.oldPolicy
        del self.policy
        del self.folder2
        del self.folder1

        self._cleanApp()

    def tearDown(self):
        noSecurityManager()
        SecurityManager.setSecurityPolicy(self.oldpolicy)

        del self.root
        del self.reflecto
        del self.oldpolicy

        super(CopyPasteTests, self).tearDown()

 def testBoboTraverseToNonAttrValue(self):
     # Verify it's possible to use __bobo_traverse__ to an
     # arbitrary manufactured object
     noSecurityManager()
     # Default security policy always seems to deny in this case, which
     # is fine, but to test the code branch we sub in the forgiving one
     SecurityManager.setSecurityPolicy(UnitTestSecurityPolicy())
     bb = BoboTraversable()
     self.failUnless(
         bb.restrictedTraverse('manufactured') is 42)

 def tearDown( self ):
     del self.types_tool
     del self.workflow_tool
     del self.url_tool
     del self.discussion_tool
     del self.catalog_tool
     del self.root
     del self._policy
     get_transaction().abort()
     self.connection.close()
     SecurityManager.setSecurityPolicy( self._oldPolicy )

 def testBoboTraverseToAcquiredAttribute(self):
     # Verify it's possible to use __bobo_traverse__ to an acquired
     # attribute
     noSecurityManager()
     SecurityManager.setSecurityPolicy( self.oldPolicy )
     folder = self.root.folder1
     folder.stuff = 'stuff here'
     bb = BoboTraversableWithAcquisition()
     bb = bb.__of__(folder)
     self.assertEqual(
         bb.restrictedTraverse('stuff'), 'stuff here')

 def testAcquiredAttributeDenial(self):
     # Verify that restrictedTraverse raises the right kind of exception
     # on denial of access to an acquired attribute.  If it raises
     # AttributeError instead of Unauthorized, the user may never
     # be prompted for HTTP credentials.
     noSecurityManager()
     SecurityManager.setSecurityPolicy(CruelSecurityPolicy())
     newSecurityManager( None, UnitTestUser().__of__( self.root ) )
     self.root.stuff = 'stuff here'
     self.failUnlessRaises(Unauthorized,
                           self.root.folder1.restrictedTraverse, 'stuff')

    def tearDown(self):

        noSecurityManager()
        SecurityManager.setSecurityPolicy(self.oldPolicy)
        del self.oldPolicy
        del self.policy
        del self.folder2
        del self.folder1

        self._cleanApp()
        componenttesting.tearDown()
        CopySupportTestBase.tearDown(self)

 def testBoboTraverseToAcquiredProtectedObject(self):
     # Verify it's possible to use a __bobo_traverse__ which retrieves
     # objects by acquisition
     noSecurityManager()
     SecurityManager.setSecurityPolicy( self.oldPolicy )
     folder = self.root.folder1
     # restrict the ability to access the retrieved object itself
     folder.manage_permission(access_contents_information, [], 0)
     bb = BoboTraversableWithAcquisition()
     bb = bb.__of__(self.root)
     self.failUnlessRaises(Unauthorized,
                           self.root.folder1.restrictedTraverse, 'folder1')