0

我有这些变量：

PERM_READ = 0x01
PERM_WRITE = 0x02
PERM_CMDS = 0x04

以及检查网络或传感器权限的功能。确定用户权限的函数。

这是功能：

def check_network_access(self, network, access=None, raise_err=True):
    if access is None:
        access = PERM_READ
    else:
        assert(access > 0)
        assert(access <= (PERM_READ + PERM_WRITE + PERM_CMDS))
    usr = self.get_current_user()
    usr_id = usr['id']
    # Does the network exist?
    net = self.get_network(network)
    if not net:
        raise tornado.web.HTTPError(404, "not found")

    self.lock_tables('read', ['nets_permissions'])
    perms = self.db.get("SELECT * FROM nets_permissions WHERE network_id=%s AND \
                        user_id=%s", network, usr_id)
    self.unlock_tables()
    if (not perms) or ((perms['perm'] & access) != access):
        if (raise_err):
            raise tornado.web.HTTPError(403, "access forbidden %s %s", perms['perm'], access)
        else: 
            return False
    return True

现在，例如，当我使用此处理程序调用页面时出现错误：

class NetworkStatusHandler(BaseHandler):
# Requires authentication 
@tornado.web.authenticated
def get(self, nid):

    # Retrieve the current user 
    usr = self.get_current_user()
    usr_id = usr['id']

    perm = self.db.query("SELECT n.perm FROM nets_permissions as n \
                          WHERE n.network_id=%s AND n.user_id=%s", nid, int(usr_id))

    # Check whether the user has access to the network 
    perms = self.check_network_access(nid, perm)
    net = self.get_network(nid)
    # Render the networks page
    self.render("networkstatus.html", net=net)

我的错误是：

File "./wsn.py", line 264, in check_network_access
raise tornado.web.HTTPError(403, "access forbidden %s %s", perms['perm'], access)
HTTPError: HTTP 403: Forbidden (access forbidden 4 1)

我认为这是传递 cariable perm/access to the function 的问题......我必须如何传递这个变量才能做到这一点是一个整数而不是一个列表？

感谢您的帮助！

4

1 回答 1

0

这是正确的方法：

class NetworkStatusHandler(BaseHandler):
# Requires authentication 
@tornado.web.authenticated
def get(self, nid):

    # Retrieve the current user 
    usr = self.get_current_user()
    usr_id = usr['id']

    self.lock_tables("read", ['nets_permissions as n'])
    perm = self.db.get("SELECT n.perm FROM nets_permissions as n \
                          WHERE n.network_id=%s AND n.user_id=%s", nid, int(usr_id))
    self.unlock_tables()

    # Check whether the user has access to the network
    perms = self.check_network_access(nid, perm['perm'])
    net = self.get_network(nid)
    # Render the networks page
    self.render("networkstatus.html", net=net)

使用 self.db.get 和 perm['perm'] 。谢谢！！！！

于 2012-09-12T16:03:33.573 回答