CODEWITHSUNDEEP
pythongoogle-app-engineauthorizationacl
alex
alex

Reputation: 2451

Role-based authorization mechanism for a GAE app

I'm looking for a role-based framework/module/package for an app written in Python (2.7) running on Google App Engine.

With role-based I mean a mechanism that would allow me to check (during a request processing most of the time) whether a certain user is able to perform a specific action.

A couple use cases:

I'm imagining something like 

user_a.is_able_to('read', user_b) # -> True of False

or

user_a.authorize('update', user_b) # raises an exception if 'not allowed to'

So far I've only seen acl.py from tipfy. Looks quite simple and pretty much close to what I'm looking for. I'm wondering whether there's something similar to that acl.py, preferably implemented using NDB.

Upvotes: 9

Views: 1114

Answers (2)

Naveen Basiri
Naveen Basiri

Reputation: 11

Turbogears and Web2py frameworks have the role based access control you can integrate one of them on GAE Python version.

Upvotes: 1

David Watson
David Watson

Reputation: 3432

Web2py contains role based access control which I believe works on GAE. This is documented here:

http://web2py.com/books/default/chapter/29/9

You may be able to fork the auth module and mod it for your purposes. I know people have done this with other parts of web2py such as the DAL.

Upvotes: 2

Related Questions