Infra/lemur
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Enhance domains query and sensitive domain checking code; Allow creation of opt-out roles via config

Browse Source
This commit is contained in:
Curtis Castrapel
2019-05-30 10:21:44 -07:00
parent 8bc23f6deb
commit 8b821d0023
4 changed files with 28 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
lemur/auth/permissions.py
View File

@ -9,6 +9,7 @@
from functools import partial
from collections import namedtuple
from flask import current_app
from flask_principal import Permission, RoleNeed
# Permissions
@ -21,7 +22,14 @@ CertificateOwnerNeed = partial(CertificateOwner, "role")
class SensitiveDomainPermission(Permission):
def __init__(self):
super(SensitiveDomainPermission, self).__init__(RoleNeed("admin"))
needs = [RoleNeed("admin")]
sensitive_domain_roles = current_app.config.get("SENSITIVE_DOMAIN_ROLES", [])
if sensitive_domain_roles:
for role in sensitive_domain_roles:
needs.append(RoleNeed(role))
super(SensitiveDomainPermission, self).__init__(*needs)
class CertificatePermission(Permission):