Table of Contents

Class: IAuthorizedPrincipal ./src/peak/security/interfaces.py

A principal (e.g. user) w/global grants or denials of permission

In addition to permission checks based on business rules, it may be desirable to globally grant or deny a permission for a given principal. If this is the case, providing an adapter from your user object class to IAuthorizedPrincipal will allow the user object to participate in permission checks via the checkGlobalPermission() method.

Base Classes   
Interface
Methods   
checkGlobalPermission
  checkGlobalPermission 
checkGlobalPermission ( attempt )

Does principal have a global grant or deny of attempt.permission?

Return NOT_FOUND if there is no knowledge of a global grant or denial of permType. Otherwise return truth to grant permission, or a false value to deny it.

Note that principals are not responsible for local grants/denials.


Table of Contents

This document was automatically generated on Tue Feb 17 19:55:55 2004 by HappyDoc version 2.1