web/application.py
changeset 10322 d7c33cbdce8b
parent 10001 1245357b3b3e
child 10354 635cfac73d28
equal deleted inserted replaced
10321:a4af502191d5 10322:d7c33cbdce8b
   363                 cnx = dummy()
   363                 cnx = dummy()
   364                 # XXX We want to clean up this approach in the future. But
   364                 # XXX We want to clean up this approach in the future. But
   365                 # several cubes like registration or forgotten password rely on
   365                 # several cubes like registration or forgotten password rely on
   366                 # this principle.
   366                 # this principle.
   367 
   367 
   368             # DENY https acces for anonymous_user
       
   369             if (req.https
       
   370                 and req.session.anonymous_session
       
   371                 and self.vreg.config['https-deny-anonymous']):
       
   372                 # don't allow anonymous on https connection
       
   373                 raise AuthenticationError()
       
   374             # nested try to allow LogOut to delegate logic to AuthenticationError
   368             # nested try to allow LogOut to delegate logic to AuthenticationError
   375             # handler
   369             # handler
   376             try:
   370             try:
   377                 ### Try to generate the actual request content
   371                 ### Try to generate the actual request content
   378                 with cnx:
   372                 with cnx: