owner_token, authentication and authorization, gevent

Author: kroman0

openprocurement.api.ini

@@ -12,9 +12,10 @@ pyramid.debug_templates = true
 pyramid.default_locale_name = en
 
 [server:main]
-use = egg:waitress#main
+use = egg:chaussette
 host = 0.0.0.0
 port = 6543
+backend = gevent
 
 # Begin logging configuration
 

setup.py

@@ -9,7 +9,8 @@
 requires = [
     'setuptools',
     'cornice',
-    'waitress',
+    'chaussette',
+    'gevent',
     'couchdb-schematics',
     'sphinxcontrib-httpdomain',
     'jsonpatch',

src/openprocurement/api/__init__.py

@@ -1,9 +1,13 @@
 # -*- coding: utf-8 -*-
 """Main entry point
 """
+import gevent.monkey; gevent.monkey.patch_all()
 import os
 import pkg_resources
 from pyramid.config import Configurator
+#from openprocurement.api.authentication import AuthenticationPolicy
+from pyramid.authentication import BasicAuthAuthenticationPolicy as AuthenticationPolicy
+from pyramid.authorization import ACLAuthorizationPolicy as AuthorizationPolicy
 from pyramid.renderers import JSON, JSONP
 from pyramid.events import NewRequest
 from couchdb import Server
@@ -36,6 +40,8 @@ def set_renderer(event):
 
 def main(global_config, **settings):
     config = Configurator(settings=settings)
+    config.set_authentication_policy(AuthenticationPolicy(None))
+    config.set_authorization_policy(AuthorizationPolicy())
     config.add_renderer('prettyjson', JSON(indent=4))
     config.add_renderer('jsonp', JSONP(param_name='opt_jsonp'))
     config.add_renderer('prettyjsonp', JSONP(indent=4, param_name='opt_jsonp'))

src/openprocurement/api/models.py

@@ -297,11 +297,11 @@ class Options:
     complaints = ListType(ModelType(Complaint), default=list())
 
 
-plain_role = (blacklist('_attachments', 'revisions', 'dateModified') + schematics_embedded_role)
-view_role = (blacklist('_attachments', 'revisions') + schematics_embedded_role)
+plain_role = (blacklist('owner_token', '_attachments', 'revisions', 'dateModified') + schematics_embedded_role)
+view_role = (blacklist('owner_token', '_attachments', 'revisions') + schematics_embedded_role)
 listing_role = whitelist('dateModified', 'doc_id')
 auction_view_role = whitelist('tenderID', 'dateModified', 'bids', 'auctionPeriod', 'minimalStep')
-enquiries_role = (blacklist('_attachments', 'revisions', 'bids') + schematics_embedded_role)
+enquiries_role = (blacklist('owner_token', '_attachments', 'revisions', 'bids') + schematics_embedded_role)
 
 
 class Tender(SchematicsDocument, Model):
@@ -366,6 +366,7 @@ class Options:
 
     _attachments = DictType(DictType(BaseType), default=dict())  # couchdb attachments
     dateModified = IsoDateTimeType(default=get_now)
+    owner_token = StringType(default=lambda: uuid4().hex)
 
     @serializable(serialized_name='id')
     def doc_id(self):

src/openprocurement/api/tests/tests.ini

@@ -12,9 +12,10 @@ pyramid.debug_templates = true
 pyramid.default_locale_name = en
 
 [server:main]
-use = egg:waitress#main
+use = egg:chaussette
 host = 0.0.0.0
 port = 6543
+backend = gevent
 
 # Begin logging configuration