policy(major): simplify PolicyEngine API, add flag to ignore cache for debug purposes
This commit is contained in:
@ -18,8 +18,8 @@ def check_permissions(request, user, client):
|
||||
except Application.DoesNotExist:
|
||||
return redirect('passbook_providers_oauth:oauth2-permission-denied')
|
||||
LOGGER.debug("Checking permissions for application", user=user, application=application)
|
||||
policy_engine = PolicyEngine(application.policies.all())
|
||||
policy_engine.for_user(user).with_request(request).build()
|
||||
policy_engine = PolicyEngine(application.policies.all(), user, request)
|
||||
policy_engine.build()
|
||||
|
||||
# Check permissions
|
||||
passing, policy_messages = policy_engine.result
|
||||
|
||||
@ -59,8 +59,9 @@ class AccessRequiredView(AccessMixin, View):
|
||||
|
||||
def _has_access(self):
|
||||
"""Check if user has access to application"""
|
||||
policy_engine = PolicyEngine(self.provider.application.policies.all())
|
||||
policy_engine.for_user(self.request.user).with_request(self.request).build()
|
||||
policy_engine = PolicyEngine(self.provider.application.policies.all(),
|
||||
self.request.user, self.request)
|
||||
policy_engine.build()
|
||||
return policy_engine.passing
|
||||
|
||||
def dispatch(self, request, *args, **kwargs):
|
||||
|
||||
Reference in New Issue
Block a user