Mercurial > libervia-web
view libervia/server/restricted_bridge.py @ 1305:db9ea167c409
pages: `profile` is now exposed to scripts
author | Goffi <goffi@goffi.org> |
---|---|
date | Thu, 16 Jul 2020 09:08:50 +0200 |
parents | 0930b06f022f |
children | 991ff12241e0 |
line wrap: on
line source
#!/usr/bin/env python3 # Libervia: a SàT frontend # Copyright (C) 2009-2020 Jérôme Poisson (goffi@goffi.org) # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU Affero General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Affero General Public License for more details. # You should have received a copy of the GNU Affero General Public License # along with this program. If not, see <http://www.gnu.org/licenses/>. from libervia.server.constants import Const as C class RestrictedBridge: """Bridge with limited access, which can be used in browser Only a few method are implemented, with potentially dangerous argument controlled. Security limit is used """ def __init__(self, host): self.host = host self.security_limit = C.SECURITY_LIMIT async def fileHTTPUploadGetSlot( self, filename, size, content_type, upload_jid, profile): return await self.host.bridgeCall( "fileHTTPUploadGetSlot", filename, size, content_type, upload_jid, profile) async def fileSharingDelete( self, service_jid, path, namespace, profile): return await self.host.bridgeCall( "fileSharingDelete", service_jid, path, namespace, profile) async def interestRetract( self, service_jid, item_id, profile ): return await self.host.bridgeCall( "interestRetract", service_jid, item_id, profile)