Only allow localhost and authenticated users access to funcweb. This entails,

- Utilizing the TurboGears identity framework
- Creating our identity model using SQLAlchemy+Elixir

1 files changed, 21 insertions, 13 deletions

diff --git a/funcweb/dev.cfg b/funcweb/dev.cfg
index 77efc8c..638c92b 100644
--- a/funcweb/dev.cfg
+++ b/funcweb/dev.cfg
@@ -1,28 +1,22 @@
 [global]
 # This is where all of your settings go for your development environment
 # Settings that are the same for both development and production
-# (such as template engine, encodings, etc.) all go in 
+# (such as template engine, encodings, etc.) all go in
 # funcweb/config/app.cfg
 
 # DATABASE
 
+# driver://username:password@host:port/database
+
 # pick the form for your database
-# sqlobject.dburi="postgres://username@hostname/databasename"
-# sqlobject.dburi="mysql://username:password@hostname:port/databasename"
-# sqlobject.dburi="sqlite:///file_name_and_path"
+# sqlalchemy.dburi="postgres://username@hostname/databasename"
+# sqlalchemy.dburi="mysql://username:password@hostname:port/databasename"
+# sqlalchemy.dburi="sqlite://%(current_dir_uri)s/devdata.sqlite"
 
 # If you have sqlite, here's a simple default to get you started
 # in development
-sqlobject.dburi="sqlite://%(current_dir_uri)s/devdata.sqlite"
-
-
-# if you are using a database or table type without transactions
-# (MySQL default, for example), you should turn off transactions
-# by prepending notrans_ on the uri
-# sqlobject.dburi="notrans_mysql://username:password@hostname:port/databasename"
+sqlalchemy.dburi="sqlite:///devdata.sqlite"
 
-# for Windows users, sqlite URIs look like:
-# sqlobject.dburi="sqlite:///drive_letter:/path/to/file"
 
 # SERVER
 
@@ -32,6 +26,7 @@ sqlobject.dburi="sqlite://%(current_dir_uri)s/devdata.sqlite"
 # Enable the debug output at the end on pages.
 # log_debug_info_filter.on = False
 
+server.socket_host="127.0.0.1"
 server.environment="development"
 autoreload.package="funcweb"
 
@@ -64,3 +59,16 @@ level='INFO'
 qualname='turbogears.access'
 handlers=['access_out']
 propagate=0
+
+[[[identity]]]
+level='INFO'
+qualname='turbogears.identity'
+handlers=['access_out']
+propagate=0
+
+[[[database]]]
+# Set to INFO to make SQLAlchemy display SQL commands
+level='ERROR'
+qualname='sqlalchemy.engine'
+handlers=['debug_out']
+propagate=0