The panko.api.rbac Module¶

Access Control Lists (ACL’s) control access the API server.

@panko.api.rbac.enforce(policy_name, request)[source]¶

Return the user and project the request should be limited to.

Parameters

• request – HTTP request

• policy_name – the policy name to validate authz against.

@panko.api.rbac.get_limited_to[source]¶

Return the user and project the request should be limited to.

Parameters

headers – HTTP headers dictionary

Returns

A tuple of (user, project), set to None if there’s no limit on

one of these.

@panko.api.rbac.get_limited_to_project[source]¶

Return the project the request should be limited to.

Parameters

headers – HTTP headers dictionary

Returns

A project, or None if there’s no limit on it.

@panko.api.rbac.init[source]¶

@panko.api.rbac.reset[source]¶