pyams-security 1.8.0

PyAMS security management package

Contents

• What is PyAMS?

• What is PyAMS_security?

• Changelog

  • 1.8.0

  • 1.7.1

  • 1.7.0

  • 1.6.2

  • 1.6.1

  • 1.6.0

  • 1.5.5

  • 1.5.4

  • 1.5.3

  • 1.5.2

  • 1.5.1

  • 1.5.0

  • 1.4.0

  • 1.3.1

  • 1.3.0

  • 1.2.1

  • 1.2.0

  • 1.1.3

  • 1.1.2

  • 1.1.1

  • 1.1.0

  • 1.0.5

  • 1.0.4

  • 1.0.3

  • 1.0.2

  • 1.0.1

  • 1.0.0

What is PyAMS?

PyAMS (Pyramid Application Management Suite) is a small suite of packages written for applications and content management with the Pyramid framework.

PyAMS is actually mainly used to manage web sites through content management applications (CMS, see PyAMS_content package), but many features are generic and can be used inside any kind of web application.

All PyAMS documentation is available on ReadTheDocs; source code is available on Gitlab and pushed to Github.

What is PyAMS_security?

PyAMS_security is a core extension package for PyAMS which provides all main security-related features; the package provides a custom authentication policy which is based on a custom “security manager”. This utility is a pluggable tool which is handling system users, local users and groups, as well as OAuth authentication; external packages can also provide authentication based on an LDAP directory.

PyAMS_security also provides utilities to extract credentials from queries, like HTTP basic authentication or JWT tokens, and can also provide your own credentials extraction mechanisms.

Finally, PyAMS_security provides roles management, as well as custom schema fields to store roles assigned to principals.

Changelog

1.8.0

• added attribute to security manager to show link in home page

1.7.1

• added strings constants for plug-ins labels

1.7.0

• added ProtectedViewObjectMixin, to be used as base for any object using dynamic permission property

• added “action” argument to “get_edit_permission()” function; this allows to register custom adapters to IViewContextPermissionChecker with this name, to be able to check edit permissions for custom actions

• added ISecurityContext interface

1.6.2

• renamed ‘skin’ module to ‘api’

1.6.1

• correction in Gitlab-CI Pylint task

1.6.0

• removed support for Python < 3.7

• added custom password encoders

• updated doctests

1.5.5

• updated Gitlab-CI configuration

1.5.4

• updated Gitlab-CI configuration

1.5.3

• added wheels to Buildout configuration

1.5.2

• updated Gitlab-CI configuration for last Python versions

1.5.1

• updated doctests

1.5.0

• added ISecurityManager factory configuration

• removed Travis-CI configuration

1.4.0

• added config.upgrade_role function, to be able to add permissions to an existing role

• updated default site roles

• updated doctests

1.3.1

• updated security manager interface to add registered credentials plug-ins names

1.3.0

• added argument in “find_principals” methods to only allow exact match

1.2.1

• use updated WSGI decorator to prevent storage of null values into request environment

1.2.0

• updated roles management; this will allow to extend supported roles of a given class just by adding adapters, without modifying the original class

• moved PyAMS security policy to dedicated module

• added registration of standard roles and security policy

• add factories registration in default security plug-ins

• updated users registration process

• updated adapter_config decorator arguments

• updated doctests

1.1.3

• small updates in policy management of authenticated_user_id

1.1.2

• updated doctests with configured cache

1.1.1

• removed dependency on pyams_auth_http package

1.1.0

• moved authentication plug-ins to dedicated packages (see pyams_auth_http, pyams_auth_jwt…)

• moved PyAMS authentication policy to dedicated module

• handle ConnectionStateError in authentication policy

• updated doctests

1.0.5

• simple version switch to avoid mismatch in Buildout configuration file… :(

1.0.4

• code cleanup

1.0.3

• handle ConnectionStateError in JWT authentication plug-in

• updated doctests

1.0.2

• added support for HS512 and RS512 JWT encryption protocols

1.0.1

• updated imports in include file for tests integration

1.0.0

• initial release