ben/mcollective-actionpolicy-auth
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

20472 - Update actionpolicy readme

Browse Source 
Updated actionpolicy readme to describe the fact that enable_default
takes precedence over allow_unconfigured.
This commit is contained in:
Pieter Loubser
2013-04-30 10:32:04 +01:00
committed by R.I.Pienaar
parent 84ff5d959d
commit 2248e5bcd9
2 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
View File

@@ -32,7 +32,9 @@ Enabling a default policy
plugin.actionpolicy.enable_default = 1 plugin.actionpolicy.enable_default = 1
plugin.actionpolicy.default_name = default plugin.actionpolicy.default_name = default
This allows you to create a policy file called default.policy which will be used unless a specific policy file exists. This allows you to create a policy file called default.policy which will be used unless a specific policy file exists. Note that if both
allow_unconfigured and enable_default are configured all requests will go through the default policy, as enable_default takes precedence
over allow_unconfigured.
Usage Usage
============================= =============================

9
spec/actionpolicy/actionpolicy_spec.rb
View File

@@ -78,6 +78,15 @@ module MCollective
ActionPolicy.any_instance.expects(:parse_policy_file).with('/rspecdir/policyfile') ActionPolicy.any_instance.expects(:parse_policy_file).with('/rspecdir/policyfile')
actionpolicy.authorize_request actionpolicy.authorize_request
end end
it 'should enforce precedence of enable_default over allow_unconfigured' do
config.stubs(:pluginconf).returns({'actionpolicy.allow_unconfigured' => 'y',
'actionpolicy.enable_default' => 'y'})
ActionPolicy.any_instance.expects(:lookup_policy_file).returns('/rspec/default')
ActionPolicy.any_instance.expects(:parse_policy_file).with('/rspec/default')
actionpolicy.authorize_request
end
end end
describe '#parse_policy_file' do describe '#parse_policy_file' do