flask-authz
flask-authz copied to clipboard
Support setting Owner Username for Audit logging when using owner_loader
when using owner_loader
instead of 'CABSIN_OWNER_HEADERS' (request headers in general), there seems to be no way to set the owner's username for audit logging. Can we provide support for setting an owner name when using owner_loader
preferably outside of request headers?
@jessecooper @dfresh613
Definitely seems like we should audit the enforce attempts for owner_loader in the same way we do for headers.
Seems like a pretty straightforward re-factor:
- extract calls of
self.e.enforce
fromcasbin_enforcer.py
into a separate functiontry_enforce
-
try_enforce
method can consistently log audit messages without duplicating log code
We encourage PRs for improvements like this. If this is a feature that will benefit your use case, maybe you can take a shot at it @daobeng
@Nekotoxin
/cc @leeqvip
@daobeng
Hello, you can try to set username as follow to resolve the problem.
Closed as resolved