X-Git-Url: https://ruin.nu/git/?a=blobdiff_plain;f=lib%2FNDWeb.pm;h=030e2499000c7c8496601c27b5f0b986e729a73a;hb=2956fe2cfc4e16e15e4ccf46c68fd3daa0cb4fe7;hp=8cc8388798f1d2dec3b48f1d2fd483be1b41c890;hpb=32bf807f4c912062de85f9beee5228a23014484d;p=ndwebbie.git diff --git a/lib/NDWeb.pm b/lib/NDWeb.pm index 8cc8388..030e249 100644 --- a/lib/NDWeb.pm +++ b/lib/NDWeb.pm @@ -5,10 +5,6 @@ use warnings; use Catalyst::Runtime '5.70'; -#Need to preload, otherwise the first hit is slow -use CGI qw/:standard/; -escapeHTML(''); - # Set flags and add plugins for the application # # -Debug: activates the debug mode for very useful log messages @@ -32,7 +28,23 @@ our $VERSION = '0.01'; __PACKAGE__->config( name => 'NDWeb' ); __PACKAGE__->config->{'Plugin::Authentication'}{'use_session'} = 1; - +__PACKAGE__->config(session => { + storage => "/tmp/ndweb-$>/sesession", + directory_umask => 077, + expires => 300, + verify_address => 1, +}); +__PACKAGE__->config( cache => { + backend => { + class => "Cache::FileCache", + cache_root => "/tmp/ndweb-$>", + directory_umask => 077, + }, +}); + +__PACKAGE__->config( page_cache => { + set_http_headers => 1, +}); # Start the application @@ -48,12 +60,40 @@ __PACKAGE__->setup(qw/ Authorization::Roles Authorization::ACL + Session::DynamicExpiry Session Session::Store::File Session::State::Cookie + + Compress::Gzip + Compress::Deflate + + Cache + PageCache /); + __PACKAGE__->deny_access_unless('/users',[qw/admin_users/]); +__PACKAGE__->deny_access_unless('/alliances',[qw/alliances/]); +__PACKAGE__->deny_access_unless('/alliances/resources',[qw/alliances_resources/]); +__PACKAGE__->deny_access_unless('/graphs/alliancevsintel',[qw/graphs_intel/]); +__PACKAGE__->deny_access_unless('/graphs/avgalliancevsintel',[qw/graphs_intel/]); +__PACKAGE__->deny_access_unless('/members',[qw/members/]); +__PACKAGE__->deny_access_unless('/covop',[qw/covop/]); +__PACKAGE__->deny_access_unless('/calls/list',[qw/calls_list/]); +__PACKAGE__->deny_access_unless('/calls/postcallcomment',[qw/calls_edit/]); +__PACKAGE__->deny_access_unless('/calls/postcallupdate',[qw/calls_edit/]); +__PACKAGE__->deny_access_unless('/calls/postattackerupdate',[qw/calls_edit/]); +__PACKAGE__->deny_access_unless('/calls/defleeches',[qw/calls_leeches/]); +__PACKAGE__->deny_access_unless('/raids',[qw/raids_edit/]); +__PACKAGE__->allow_access_if('/raids/index',1); +__PACKAGE__->allow_access_if('/raids/view',1); +__PACKAGE__->allow_access_if('/raids/findRaid',1); +__PACKAGE__->allow_access_if('/raids/log',1); +__PACKAGE__->deny_access_unless('/intel',[qw/intel/]); +__PACKAGE__->deny_access_unless('/intel/members',[qw/intel_members/]); +__PACKAGE__->deny_access_unless('/intel/member',[qw/intel_member/]); +__PACKAGE__->deny_access_unless('/intel/naps',[qw/intel_naps/]); =head1 NAME