Pyramid Auth Demo

Pyramid has the ability to handle complex authentication and authorization patterns. How to do so is a constant source of frustration for new users. This is a demo intended to showcase Pyramid’s authorization capabilities. A lot of the demo focuses on URL Dispatch. If you are interested in traversal, do not despair as authorization via traversal is virtually indistinguishable from the object-level security demo and all of the concepts learned transfer over easily.

This demo is built around a wiki-style website that allows users to view and create pages. All of the code for each demo is available on GitHub at https://github.com/mmerickel/pyramid_auth_demo and should be used to follow along as only certain parts of each demo are shown in the narrative.

• Introduction
• Authentication vs Authorization
  • Who Are You?
  • What Can You Do?
  • What Can I Customize?
• The Resource Tree
  • Root Factory
  • Traversal
  • Security
• Base Application
  • Startup
  • Model
  • Views
• Group-Level Security
  • Goals
  • Access Control Lists
  • Root Factory
  • Securing the Views
  • Simple Object-Level Authorization
• Object-Level Security
  • Goals
  • Why A Resource “Tree”?
  • Resource Factories
  • Securing the Views
  • Summary

Indices and tables

• Glossary

• Index

• Module Index

• Search Page