From e8a5500535cb7c23ef3d687304033e50e80dbd3f Mon Sep 17 00:00:00 2001
From: Matt Schwager <schwag09@gmail.com>
Date: Mon, 15 Oct 2012 12:34:07 -0400
Subject: IP based ACLs working for CherryPy Server. Still need to implement
 BuiltinServer and test.

---
 src/lib/Bcfg2/Server/CherryPyCore.py | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'src/lib/Bcfg2/Server/CherryPyCore.py')

diff --git a/src/lib/Bcfg2/Server/CherryPyCore.py b/src/lib/Bcfg2/Server/CherryPyCore.py
index 936279508..6709a2f10 100644
--- a/src/lib/Bcfg2/Server/CherryPyCore.py
+++ b/src/lib/Bcfg2/Server/CherryPyCore.py
@@ -63,6 +63,9 @@ class Core(BaseCore):
             username = auth_content
             password = ""
 
+        if not self.check_acls(cherrypy.request.remote.ip):
+            raise cherrypy.HTTPError(403)
+
         # FIXME: Get client cert
         cert = None
         address = (cherrypy.request.remote.ip, cherrypy.request.remote.name)
-- 
cgit v1.2.3-1-g7c22