x
/
cerberus
Code Issues Proposed changes

Check prefix path is member route 

Change-Id: I20c0bb159eef04bc88d208a3d4853d6b190c1dae
This commit is contained in:
Anthony Michon 2015-08-05 14:00:51 +02:00
parent a7d8ba5031
commit a9133e72d5
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
cerberus/api/hooks.py
View File

@ -100,11 +100,17 @@ class AuthorizationHook(hooks.PecanHook):
self.member_routes = member_routes
super(AuthorizationHook, self).__init__()
def is_path_in_routes(self, path):
for p in self.member_routes:
if path.startswith(p):
return True
return False
def before(self, state):
ctx = state.request.context
if not ctx.is_admin and not ctx.is_public_api and \
state.request.path not in self.member_routes:
not self.is_path_in_routes(state.request.path):
raise exc.HTTPForbidden()