Changeset 12189 for main/waeup.ikoba/trunk/src/waeup/ikoba/authentication.py

Timestamp:

10 Dec 2014, 11:12:42 (10 years ago)

Author:

Henrik Bettermann

Message:

We need to check if imported roles do exist.

File:

• main/waeup.ikoba/trunk/src/waeup/ikoba/authentication.py (modified) (2 diffs)

main/waeup.ikoba/trunk/src/waeup/ikoba/authentication.py

@@ -40 +40 @@
     IBatchProcessor, IGNORE_MARKER, IFailedLoginInfo)
 from waeup.ikoba.utils.batching import BatchProcessor
+from waeup.ikoba.permissions import get_all_roles
 
 def setup_authentication(pau):
@@ -513 +514 @@
         return
 
+    def checkConversion(self, row, mode='ignore'):
+        """Validates all values in row.
+        """
+        errs, inv_errs, conv_dict = super(
+            UserProcessor, self).checkConversion(row, mode=mode)
+        # We need to check if roles exist.
+        roles = row.get('roles', None)
+        all_roles = [i[0] for i in get_all_roles()]
+        if roles not in ('', IGNORE_MARKER):
+            evalvalue = eval(roles)
+            for role in evalvalue:
+                if role not in all_roles:
+                    errs.append(('roles','invalid role'))
+        return errs, inv_errs, conv_dict
+
 class UsersPlugin(grok.GlobalUtility):
     """A plugin that updates users.