Access control in rietveld

[Tyler Pirtle]

I have a particular use case where I need to whitelist all access to my appengine hosted rietveld instance,

where the whitelist would explicitly list users (not ips).

I don't think this exists currently in rietveld, but does anyone here have any suggestions? ;)

Thanks,

Tyler

[Andi Albrecht]

Hi Tyler,

this sounds much like an additional middleware that checks if the user is whitelisted (by querying a custom model). If not, the user could be redirected to a special error page.

--
Andi

> --
> You received this message because you are subscribed to the Google Groups "codereview-discuss" group.
> To view this discussion on the web visit https://groups.google.com/d/msg/codereview-discuss/-/WLD2QhItSTAJ.
> To post to this group, send email to coderevie...@googlegroups.com.
> To unsubscribe from this group, send email to codereview-disc...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/codereview-discuss?hl=en.
>

--
Sent from Gmail Mobile

[Tyler Pirtle]

On Friday, January 27, 2012 8:06:21 AM UTC-8, Andi Albrecht wrote:

Hi Tyler,

this sounds much like an additional middleware that checks if the user is whitelisted (by querying a custom model). If not, the user could be redirected to a special error page.

--
Andi

Thanks Andi! Middleware is a great idea, and should be pretty simple to implement. I'll try that out.