access.py 1.7 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667
  1. # -*- coding: utf-8 -*-
  2. #
  3. # This file is part of Radicale Server - Calendar Server
  4. # Copyright © 2011-2012 Guillaume Ayoub
  5. #
  6. # This library is free software: you can redistribute it and/or modify
  7. # it under the terms of the GNU General Public License as published by
  8. # the Free Software Foundation, either version 3 of the License, or
  9. # (at your option) any later version.
  10. #
  11. # This library is distributed in the hope that it will be useful,
  12. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  13. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  14. # GNU General Public License for more details.
  15. #
  16. # You should have received a copy of the GNU General Public License
  17. # along with Radicale. If not, see <http://www.gnu.org/licenses/>.
  18. """
  19. Radicale access module.
  20. Manages access to collections.
  21. """
  22. import os
  23. import sys
  24. from radicale import acl, authorization, log
  25. def load():
  26. log.LOGGER.debug("access.load()")
  27. global aacl ; aacl = acl.load()
  28. global aauthorization ; aauthorization = authorization.load()
  29. def is_authenticated(user, password):
  30. if (not user):
  31. # No user given
  32. return False
  33. return aacl.is_authenticated(user, password)
  34. def may_read(user, collection):
  35. """Check if the user is allowed to read the collection"""
  36. user_authorized = aauthorization.read_authorized(user, collection)
  37. log.LOGGER.debug("read %s %s -- %i" % (user, collection.owner, user_authorized))
  38. return user_authorized
  39. def may_write(user, collection):
  40. """Check if the user is allowed to write the collection"""
  41. user_authorized = aauthorization.write_authorized(user, collection)
  42. log.LOGGER.debug("write %s %s -- %i" % (user, collection.owner, user_authorized))
  43. return user_authorized