c339189b44
Switch to using the self-contained django_openstack_auth
package which is a proper django.contrib.auth pluggable
backend.
Notable functional improvements include:
* Better overall security via use of standard Django
auth code (well-vetted by security experts).
* Token expiration checking.
* User "enabled" attribute checking.
* Support for full range of Django auth attributes
such as is_anonymous, is_active, is_superuser, etc.
* Improved hooks for RBAC/permission-based acess control.
Regarding the RBAC/permission-based access control, this
patch moves all "role" and "service"-oriented checks to
permission checks. This will make transitioning to
policy-driven checking much easier once that fully lands
in OpenStack.
Implements blueprint move-keystone-support-to-django-auth-backend
Change-Id: I4f3112af797aff8c4c5e9930c6ca33a70e45589d
45 lines
1.6 KiB
Python
45 lines
1.6 KiB
Python
# vim: tabstop=4 shiftwidth=4 softtabstop=4
|
|
|
|
# Copyright 2012 United States Government as represented by the
|
|
# Administrator of the National Aeronautics and Space Administration.
|
|
# All Rights Reserved.
|
|
#
|
|
# Copyright 2012 Nebula, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
"""
|
|
URL patterns for the OpenStack Dashboard.
|
|
"""
|
|
|
|
from django.conf.urls.defaults import patterns, url, include
|
|
from django.conf.urls.static import static
|
|
from django.conf import settings
|
|
from django.contrib.staticfiles.urls import staticfiles_urlpatterns
|
|
|
|
import horizon
|
|
|
|
|
|
urlpatterns = patterns('',
|
|
url(r'^$', 'openstack_dashboard.views.splash', name='splash'),
|
|
url(r'^auth/', include('openstack_auth.urls')),
|
|
url(r'', include(horizon.urls)))
|
|
|
|
# Development static app and project media serving using the staticfiles app.
|
|
urlpatterns += staticfiles_urlpatterns()
|
|
|
|
# Convenience function for serving user-uploaded media during
|
|
# development. Only active if DEBUG==True and the URL prefix is a local
|
|
# path. Production media should NOT be served by Django.
|
|
urlpatterns += static(settings.MEDIA_URL, document_root=settings.MEDIA_ROOT)
|