comparison roundup/admin.py @ 4781:6e9b9743de89

Implementation for: http://issues.roundup-tracker.org/issue2550731 Add mechanism for the detectors to be able to tell the source of the data changes. Support for tx_Source property on database handle. Can be used by detectors to find out the source of a change in an auditor to block changes arriving by unauthenticated mechanisms (e.g. plain email where headers can be faked). The property db.tx_Source has the following values: * None - Default value set to None. May be valid if it's a script that is created by the user. Otherwise it's an error and indicates that some code path is not properly setting the tx_Source property. * "cli" - this string value is set when using roundup-admin and supplied scripts. * "web" - this string value is set when using any web based technique: html interface, xmlrpc .... * "email" - this string value is set when using an unauthenticated email based technique. * "email-sig-openpgp" - this string value is set when email with a valid pgp signature is used. (*NOTE* the testing for this mode is incomplete. If you have a pgp infrastructure you should test and verify that this is properly set.) This also includes some (possibly incomplete) tests cases for the modes above and an example of using ts_Source in the customization.txt document.
author John Rouillard <rouilj@ieee.org>
date Tue, 23 Apr 2013 23:06:09 -0400
parents 693c75d56ebe
children 349a83aca61f
comparison
equal deleted inserted replaced
4774:3adff0fb0207 4781:6e9b9743de89
1473 1473
1474 # only open the database once! 1474 # only open the database once!
1475 if not self.db: 1475 if not self.db:
1476 self.db = tracker.open('admin') 1476 self.db = tracker.open('admin')
1477 1477
1478 self.db.tx_Source = 'cli'
1479
1478 # do the command 1480 # do the command
1479 ret = 0 1481 ret = 0
1480 try: 1482 try:
1481 ret = function(args[1:]) 1483 ret = function(args[1:])
1482 except UsageError, message: 1484 except UsageError, message:

Roundup Issue Tracker: http://roundup-tracker.org/