1996-09-10 14:37:05 -03:00
|
|
|
\section{Standard Module \sectcode{Bastion}}
|
1997-07-17 13:34:52 -03:00
|
|
|
\label{module-Bastion}
|
1996-09-10 14:37:05 -03:00
|
|
|
\stmodindex{Bastion}
|
1998-02-13 02:58:54 -04:00
|
|
|
\setindexsubitem{(in module Bastion)}
|
1996-09-10 14:37:05 -03:00
|
|
|
|
|
|
|
% I'm concerned that the word 'bastion' won't be understood by people
|
|
|
|
% for whom English is a second language, making the module name
|
|
|
|
% somewhat mysterious. Thus, the brief definition... --amk
|
|
|
|
|
|
|
|
According to the dictionary, a bastion is ``a fortified area or
|
|
|
|
position'', or ``something that is considered a stronghold.'' It's a
|
|
|
|
suitable name for this module, which provides a way to forbid access
|
|
|
|
to certain attributes of an object. It must always be used with the
|
1998-02-23 10:42:00 -04:00
|
|
|
\module{rexec} module, in order to allow restricted-mode programs access
|
1996-09-10 14:37:05 -03:00
|
|
|
to certain safe attributes of an object, while denying access to
|
|
|
|
other, unsafe attributes.
|
|
|
|
|
|
|
|
% I've punted on the issue of documenting keyword arguments for now.
|
|
|
|
|
|
|
|
\begin{funcdesc}{Bastion}{object\optional{\, filter\, name\, class}}
|
1998-02-23 10:42:00 -04:00
|
|
|
Protect the object \var{object}, returning a bastion for the
|
1996-09-10 14:37:05 -03:00
|
|
|
object. Any attempt to access one of the object's attributes will
|
|
|
|
have to be approved by the \var{filter} function; if the access is
|
1998-02-23 10:42:00 -04:00
|
|
|
denied an \exception{AttributeError} exception will be raised.
|
1996-09-10 14:37:05 -03:00
|
|
|
|
|
|
|
If present, \var{filter} must be a function that accepts a string
|
|
|
|
containing an attribute name, and returns true if access to that
|
|
|
|
attribute will be permitted; if \var{filter} returns false, the access
|
|
|
|
is denied. The default filter denies access to any function beginning
|
1998-02-23 10:42:00 -04:00
|
|
|
with an underscore (\samp{_}). The bastion's string representation
|
|
|
|
will be \samp{<Bastion for \var{name}>} if a value for
|
|
|
|
\var{name} is provided; otherwise, \samp{repr(\var{object})} will be
|
|
|
|
used.
|
1996-09-10 14:37:05 -03:00
|
|
|
|
1998-02-23 10:42:00 -04:00
|
|
|
\var{class}, if present, would be a subclass of \class{BastionClass};
|
1996-09-10 14:37:05 -03:00
|
|
|
see the code in \file{bastion.py} for the details. Overriding the
|
1998-02-23 10:42:00 -04:00
|
|
|
default \class{BastionClass} will rarely be required.
|
1996-09-10 14:37:05 -03:00
|
|
|
|
|
|
|
\end{funcdesc}
|