pyams-security 1.5.0

PyAMS security management package

Contents

• What is PyAMS?

• What is PyAMS_security?

• Changelog

  • 1.5.0

  • 1.4.0

  • 1.3.1

  • 1.3.0

  • 1.2.1

  • 1.2.0

  • 1.1.3

  • 1.1.2

  • 1.1.1

  • 1.1.0

  • 1.0.5

  • 1.0.4

  • 1.0.3

  • 1.0.2

  • 1.0.1

  • 1.0.0

What is PyAMS?

PyAMS (Pyramid Application Management Suite) is a small suite of packages written for applications and content management with the Pyramid framework.

PyAMS is actually mainly used to manage web sites through content management applications (CMS, see PyAMS_content package), but many features are generic and can be used inside any kind of web application.

All PyAMS documentation is available on ReadTheDocs; source code is available on Gitlab and pushed to Github.

What is PyAMS_security?

PyAMS_security is a core extension package for PyAMS which provides all main security-related features; the package provides a custom authentication policy which is based on a custom “security manager”. This utility is a pluggable tool which is handling system users, local users and groups, as well as OAuth authentication; external packages can also provide authentication based on an LDAP directory.

PyAMS_security also provides utilities to extract credentials from queries, like HTTP basic authentication or JWT tokens, and can also provide your own credentials extraction mechanisms.

Finally, PyAMS_security provides roles management, as well as custom schema fields to store roles assigned to principals.

Changelog

1.5.0

• added ISecurityManager factory configuration

• removed Travis-CI configuration

1.4.0

• added config.upgrade_role function, to be able to add permissions to an existing role

• updated default site roles

• updated doctests

1.3.1

• updated security manager interface to add registered credentials plug-ins names

1.3.0

• added argument in “find_principals” methods to only allow exact match

1.2.1

• use updated WSGI decorator to prevent storage of null values into request environment

1.2.0

• updated roles management; this will allow to extend supported roles of a given class just by adding adapters, without modifying the original class

• moved PyAMS security policy to dedicated module

• added registration of standard roles and security policy

• add factories registration in default security plug-ins

• updated users registration process

• updated adapter_config decorator arguments

• updated doctests

1.1.3

• small updates in policy management of authenticated_user_id

1.1.2

• updated doctests with configured cache

1.1.1

• removed dependency on pyams_auth_http package

1.1.0

• moved authentication plug-ins to dedicated packages (see pyams_auth_http, pyams_auth_jwt…)

• moved PyAMS authentication policy to dedicated module

• handle ConnectionStateError in authentication policy

• updated doctests

1.0.5

• simple version switch to avoid mismatch in Buildout configuration file… :(

1.0.4

• code cleanup

1.0.3

• handle ConnectionStateError in JWT authentication plug-in

• updated doctests

1.0.2

• added support for HS512 and RS512 JWT encryption protocols

1.0.1

• updated imports in include file for tests integration

1.0.0

• initial release