cfg.access_control: provide access control configuration switch

1 files changed, 4 insertions, 1 deletions

diff --git a/src-py/rhizi_server.py b/src-py/rhizi_server.py
index d93d285e..9b0b479c 100644
--- a/src-py/rhizi_server.py
+++ b/src-py/rhizi_server.py
@@ -188,10 +188,13 @@ def init_rest_api(cfg, flask_webapp):
                                                  {'methods': ['GET']}))
         rest_entry_set += rest_dev_entry_set
 
+    if False == cfg.access_control:
+        log.warn('access control disabled, public access set on all URLs')
+
     for re_entry in rest_entry_set:
         rest_path, f, flask_args = re_entry
 
-        if '/login' != rest_path:
+        if cfg.access_control and '/login' != rest_path:
             # currently require login on all but /login paths
             f = login_decorator(f)