Mercurial > p > roundup > code
diff templates/classic/detectors/userauditor.py @ 1692:64f448ff07f2
audit some user properties for valid values (roles, address)
[SF#742968] and [SF#739653]
| author | Richard Jones <richard@users.sourceforge.net> |
|---|---|
| date | Tue, 24 Jun 2003 04:16:35 +0000 |
| parents | |
| children | 00f0267db956 e2727ced8bea |
line wrap: on
line diff
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/templates/classic/detectors/userauditor.py Tue Jun 24 04:16:35 2003 +0000 @@ -0,0 +1,45 @@ +# Copyright (c) 2003 Richard Jones (richard@mechanicalcat.net) +# +# Permission is hereby granted, free of charge, to any person obtaining a copy +# of this software and associated documentation files (the "Software"), to deal +# in the Software without restriction, including without limitation the rights +# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +# copies of the Software, and to permit persons to whom the Software is +# furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included in +# all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +# SOFTWARE. +# +#$Id: userauditor.py,v 1.1 2003-06-24 04:16:35 richard Exp $ + +def audit_user_fields(db, cl, nodeid, newvalues): + ''' Make sure user properties are valid. + + - email address has no spaces in it + - roles specified exist + ''' + if newvalues.has_key('address') and ' ' in newvalues['address']: + raise ValueError, 'Email address must not contain spaces' + + if newvalues.has_key('roles'): + roles = [x.lower().strip() for x in newvalues['roles'].split(',')] + for rolename in roles: + if not db.security.role.has_key(rolename): + raise ValueError, 'Role "%s" does not exist'%rolename + + +def init(db): + # fire before changes are made + db.user.audit('set', audit_user_fields) + db.user.audit('create', audit_user_fields) + +# vim: set filetype=python ts=4 sw=4 et si +#SHA: d4aea7465d4b7ca78de71ed9e73e09ce29b1b111
