class AUTH_USER(object): """ Role-Based authentication module """ def __init__(self, request, response, session, cache, T, db): self.request = request self.response = response self.session = session self.cache = cache self.T = T self.db = db self._anonymous_user = 'Anonymous User' def authenticate(self, auth_email): """ sets authentication for the user """ self.session.auth_email = auth_email def logout(self): """ Clear the session """ self.session.auth_email = None def has_role(self, role): """ Returns True if user belongs to role, or false if user is not authenticated or does not belong to the role """ hasrole = False roles = [] if self.is_auth(): auth_email = self.session.auth_email user_roles = self.db((self.db.auth_users.auth_email == auth_email) &\ (self.db.auth_users.id == self.db.auth_user_role.auth_user_id) &\ (self.db.auth_user_role.auth_role_id == \ self.db.auth_roles.id)).select(self.db.auth_roles.auth_role_name) if user_roles: roles = [each_role.auth_role_name for each_role in user_roles\ if each_role.auth_role_name == role] if roles: hasrole = True return hasrole def get_roles(self): """ Returns a list of roles the user belongs to """ roles = [] auth_email = self.get_user_name() user_roles = self.db((self.db.auth_users.auth_email == auth_email) &\ (self.db.auth_users.id == self.db.auth_user_role.auth_user_id) &\ (self.db.auth_user_role.auth_role_id == \ self.db.auth_roles.id)).select(self.db.auth_roles.auth_role_name) if user_roles: roles = [each_role.auth_role_name for each_role in user_roles] return roles def get_user_name(self): """ returns the username """ _auth_name = self.session.auth_email if _auth_name is None: _auth_name = self._anonymous_user return _auth_name def is_auth(self): """ True if the user has been authenticated in the system, false otherwise """ return self.get_user_name() != self._anonymous_user