3
100%
master: %

Ran 18 Nov 2015 12:14PM UTC

Files 79

Run time 8s

Badge

Embed ▾

Committed 18 Nov 2015 11:57AM UTC coverage: 99.654%. First build

Job # TOX_ENV=pypy

Build Type

push

travis-ci

Committed by

leplatrem

Commit Message

Load plugins after setting up authn/authz

While developing kinto-attachment, we realized that if plugins were included
before setting-up authn/authz, their views could not be protected by permissions.

For example, when a plugin defines a plugin like this in a view:

```python

    upload = Service(name="upload",
                     path="/upload",
                     description="",
                     factory=RouteFactory)
    @upload.get(permission="upload")
    def upload_get(request):
        return {"ok": True}

```

The factory is taken into account, but the authorization policy was never
called!

With this change, the plugins are included after ``cliquet.initialization.setup_authentication()``. Thus after ``config.include("pyramid_multiauth")`` thus after setting
up the authorization policy from setting ``multiauth.authorization_policy``.

The side-effet of this is that plugins cannot set default settings regarding auth.
It was the case of *cliquet-fxa* which defines an implicit setting ``multiauth.policy.fxa.use`` that allowed to just to specify ``fxa`` in the ``multiauth.policies`` setting.

The setting ``multiauth.policy.fxa.use`` must now be defined explicitly.

Run Details

8059 of 8087 relevant lines covered (99.65%)

1.0 hits per line

mozilla-services / cliquet / 2726 / 3
100%
master: %

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 2726.3 (TOX_ENV=pypy)

mozilla-services / cliquet / 2726 / 3 100% master: %

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 2726.3 (TOX_ENV=pypy)

mozilla-services / cliquet / 2726 / 3
100%
master: %

README BADGES
x