Added identity discussion to BE-Web README.txt & require login to edit bugs.

diff --git a/Bugs-Everywhere-Web/README.txt b/Bugs-Everywhere-Web/README.txt
index b6b78cfa32a41d7e8bd8a805938fa2b770d5eea3..10774dfa5042acbb1839071a77db4bdf12f59e88 100644 (file)
--- a/Bugs-Everywhere-Web/README.txt
+++ b/Bugs-Everywhere-Web/README.txt
@@ -1,10 +1,42 @@
 Bugs-Everywhere-Web
 
+This is a TurboGears (http://www.turbogears.org) project. It can be
+started by running the start-beweb.py script.
+
 Configure by creating an appropriate beweb/config.py from
 beweb/config.py.example.  The server will edit the repositories that
 it manages, so you should probably have it running on a seperate
 branch than your working repository.  You can then merge/push
 as you require to keep the branches in sync.
 
-This is a TurboGears (http://www.turbogears.org) project. It can be
-started by running the start-beweb.py script.
+See
+  http://docs.turbogears.org/1.0/Configuration
+For standard turbogears configuration information.
+
+Currently, you need to login for any methods with a
+@identity.require() decorator.  The only group in the current
+implementation is 'editbugs'.  Basically, anyone can browse around,
+but only registered 'editbugs' members can change things.
+
+Anonymous actions:
+ * See project tree
+ * See buglist
+ * See comments
+Editbugs required actions:
+ * Create new comments
+ * Reply to comments
+ * Update comment info
+
+
+All login attempts will fail unless you have added some valid users. See
+  http://docs.turbogears.org/1.0/GettingStartedWithIdentity
+For a good intro.  For the impatient, try something like
+  Bugs-Everywhere-Web$ tg-admin toolbox
+  browse to 'CatWalk' -> 'User' -> 'Add User+'
+or
+  Bugs-Everywhere-Web$ tg-admin sholl
+  >>> u = User(user_name=u'jdoe', email_address=u'jdoe@example.com',
+      display_name=u'Jane Doe', password=u'xxx')
+  >>> g = Group(group_name=u'editbugs', display_name=u'Edit Bugs')
+  >>> g.addUser(u)           # BE-Web uses SQLObject
+Exit the tg-admin shell with Ctrl-Z on MS Windows, Ctrl-D on other systems.

diff --git a/Bugs-Everywhere-Web/beweb/controllers.py b/Bugs-Everywhere-Web/beweb/controllers.py
index a64156fb036415163705821343fd05b3885cb841..a0d0ff9e432066923127a4b6f8fc28c5f3e55bf7 100644 (file)
--- a/Bugs-Everywhere-Web/beweb/controllers.py
+++ b/Bugs-Everywhere-Web/beweb/controllers.py
@@ -108,6 +108,7 @@ class Bug(PrestHandler):
         bug.save()
         raise cherrypy.HTTPRedirect(bug_url(bug_data['project'], bug.uuid))
 
+    @identity.require( identity.has_permission("editbugs"))
     @provide_action("action", "Update")
     def update(self, bug_data, bug, status, severity, summary, assigned, 
                action):