summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLV-426 <lv-426@taproot.org.il>2015-04-26 18:06:47 +0300
committerLV-426 <lv-426@taproot.org.il>2015-04-26 18:06:47 +0300
commitf7d9984a6c6497bb0af3d46f5a9f7f0fecdaa9c9 (patch)
treee4a15dfe4fb356059bcedcc8dc78f28e445b0b81
parent7dffc9f794a5ba5633d92634516e1d0986da00da (diff)
rz_config: acl__singup__email_domain
-rw-r--r--res/etc/rhizi-server.conf.example5
-rw-r--r--src/server/rz_server.py7
2 files changed, 9 insertions, 3 deletions
diff --git a/res/etc/rhizi-server.conf.example b/res/etc/rhizi-server.conf.example
index d47d2460..a5358dc1 100644
--- a/res/etc/rhizi-server.conf.example
+++ b/res/etc/rhizi-server.conf.example
@@ -52,8 +52,9 @@ feedback_recipient = feedback@localhost
# -----------------------------------------------------------------------------
# Security
#
-access_control = False
-user_db_path = ./user_db.db
+access_control = True
+user_db_path = ./deploy-local/etc/user_db.db
+acl__singup__email_domain =
# -----------------------------------------------------------------------------
# Client settings
diff --git a/src/server/rz_server.py b/src/server/rz_server.py
index 59bb4788..adb0beab 100644
--- a/src/server/rz_server.py
+++ b/src/server/rz_server.py
@@ -48,7 +48,6 @@ class Config(object):
# apply defaults
cfg = {}
- cfg['access_control'] = True
cfg['config_dir'] = os.path.abspath(os.path.dirname(file_path)) # bypass prop restriction
cfg['development_mode'] = False
cfg['listen_address'] = '127.0.0.1'
@@ -77,6 +76,12 @@ class Config(object):
# Flask keys
cfg['SECRET_KEY'] = ''
+ # Security
+ # - acl__singup__email_domain: restrict signup requests by email domain.
+ # depends on 'access_control==True', default: no restriction applied
+ cfg['access_control'] = True
+ cfg['acl__singup__email_domain'] = None
+
# Rhizi
cfg['rzdoc__mainpage_name'] = 'Welcome Rhizi'
cfg['rzdoc__name__max_length'] = 256