36 lines
1.1 KiB
Python
36 lines
1.1 KiB
Python
import asyncio
|
|
import sqlalchemy as sa
|
|
|
|
from aiohttp_security.abc import AbstractAuthorizationPolicy
|
|
|
|
from . import db
|
|
|
|
|
|
class DBAuthorizationPolicy(AbstractAuthorizationPolicy):
|
|
def __init__(self, dbengine):
|
|
self.dbengine = dbengine
|
|
|
|
@asyncio.coroutine
|
|
def authorized_user_id(self, identity):
|
|
with (yield from self.dbengine) as conn:
|
|
where = [db.users.c.login == identity,
|
|
not db.users.c.disabled]
|
|
query = db.users.count().where(sa.and_(*where))
|
|
ret = yield from conn.scalar(query)
|
|
if ret:
|
|
return identity
|
|
else:
|
|
return None
|
|
|
|
@asyncio.coroutine
|
|
def permits(self, identity, permission, context=None):
|
|
with (yield from self.dbengine) as conn:
|
|
where = [db.users.c.login == identity,
|
|
not db.users.c.disabled]
|
|
record = self.data.get(identity)
|
|
if record is not None:
|
|
# TODO: implement actual permission checker
|
|
if permission in record:
|
|
return True
|
|
return False
|