SchevoPolicy 1.0a1

Context-sensitive security policy enforcement for Schevo databases

SchevoPolicy provides security policy enforcement for Schevo databases.

• Policies are separate from the database itself. More than one policy may be enforced for a given database.

• Generic functions are used to give a wide array of flexibility in defining policies, while maintaining readability.

• The API used by client code is the same as that of the database itself. For example, accessing the list of extent names directly and through a security policy that allows it:

  >>> db.extent_names()
  ['Bar', 'Foo']
  
  >>> policy = SecurityPolicy()
  >>> context = dict(username='jdoe')
  >>> dbp = policy(context)
  >>> dbp.extent_names()
  ['Bar', 'Foo']

You can also get the latest development version.