Package Products :: Package ZenUtils :: Module Security |
[hide private]
[frames] | no frames]

# Module Security

source code

Functions | [hide private]
backupACLUserFolder(context) | source code
_createInitialUser(self) Note: copied and adapted from AccessControl.User.BasicUser | source code
createPASFolder(context) | source code
setupBasciAuthHelper(context) | source code
setupCookieHelper(context, primaryAuth=False) | source code
setupSessionHelper(context, primaryAuth=True) | source code
activateCookieBasedAuthentication(context) This sets cookie authentication as the primary auth mechanism. | source code
activateSessionBasedAuthentication(context) Stores the user credentials in the session and the token is sent to the server. | source code
setupRoleManager(context) | source code
setupUserManager(context) | source code
setupTypeSniffer(context) | source code
setupProtocolChooser(context) | source code
setupPASFolder(context) | source code
replaceACLWithPAS(context, deleteBackup=False) | source code
migratePAS(context) | source code
secureSessionCookie(event) Zope session cookie should only accesible from the server side | source code

Variables | [hide private]
| ZENOSS_ROLES = `['ZenUser', 'ZenManager']`

Function Details | [hide private]

### _createInitialUser(self) | source code
Note: copied and adapted from AccessControl.User.BasicUser If there are no users or only one user in this user folder, populates from the 'inituser' file in the instance home. We have to do this even when there is already a user just in case the initial user ignored the setup messages. We don't do it for more than one user to avoid abuse of this mechanism. Called only by OFS.Application.initialize().

### activateCookieBasedAuthentication(context) | source code
This sets cookie authentication as the primary auth mechanism. This means that the users credentials will be stored encoded in a cookie.

### activateSessionBasedAuthentication(context) | source code
Stores the user credentials in the session and the token is sent to the server. The user will be forced to re-login when zope restarts or the session times out.

### secureSessionCookie(event) | source code
Zope session cookie should only accesible from the server side Decorators: `@component.adapter(ZPublisher.interfaces.IPubEnd)`