seba
/
k4ever
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

markup errors

This commit is contained in:
seba 2011-10-07 02:38:23 +02:00
parent b5616789cc
commit 34af3d73dd
2 changed files with 5 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
k4ever/api2/decorators.py
View File

@ -8,11 +8,12 @@ def manglePluginPerms(apiFunc):
When the user which called the apifunc is a plugin this function When the user which called the apifunc is a plugin this function
goes through the following steps: goes through the following steps:
- searches the user it should change to - searches the user it should change to
- checks if this user allowed the plugin to "speak for him" - checks if this user allowed the plugin to "speak for him"
- change the request so it looks like the user called himself - change the request so it looks like the user called himself
- add an plugin_user entry containing the previous request user - add an plugin_user entry containing the previous request user
This decorator is intended to be used with django piston, so on error This decorator is intended to be used with django piston, so on error
it will return the appropriate rc.* values. it will return the appropriate rc.* values.
""" """
@ -36,7 +37,7 @@ def manglePluginPerms(apiFunc):
# FIXME: Could throw exception when we have no plugin for the # FIXME: Could throw exception when we have no plugin for the
# user - where should we report this? # user - where should we report this?
plugin = Plugin.objects.get(user=request.user) plugin = Plugin.objects.get(user=request.user)
# 1. find user! # 1. find user!
user = None user = None
try: try:
@ -64,7 +65,7 @@ def manglePluginPerms(apiFunc):
def requirePlugin(apiFunc): def requirePlugin(apiFunc):
"""Check if user is a plugin. """Check if user is a plugin.
Checks if the user is a member of the "Plugin" Group. Returns a rc.FORBIDDEN Checks if the user is a member of the "Plugin" Group. Returns a rc.FORBIDDEN
if not. if not.
""" """

6
k4ever/docs/django/api.rst
View File

@ -22,11 +22,6 @@ can be turned off.
Plugins Plugins
-------------- --------------
- how does authentication work
- what is the plugin authentication
- when does a plugin need an user?
- how to change user names
k4evers API also has a *plugin*-concept. :class:`Plugins <main.models.Plugin>` k4evers API also has a *plugin*-concept. :class:`Plugins <main.models.Plugin>`
can be allowed by users to buy items on their behalf. To do this the user can be allowed by users to buy items on their behalf. To do this the user
has to allow the plugin via the webinterface. A :class:`PluginPermission has to allow the plugin via the webinterface. A :class:`PluginPermission
@ -202,3 +197,4 @@ As one might see, ``curl`` is quite nice for accessing the API. ``curl`` also su
curl --basic http://testplugin:maunz@server/api/buyable/account/balance/?user=frundy curl --basic http://testplugin:maunz@server/api/buyable/account/balance/?user=frundy
# as plugin buy 10 times item with id 3 # as plugin buy 10 times item with id 3
curl --basic -X POST --data "amount=10" http://testplugin:maunz@server/api/buyable/item/3/?user=frundy curl --basic -X POST --data "amount=10" http://testplugin:maunz@server/api/buyable/item/3/?user=frundy