X-Git-Url: https://ruin.nu/git/?a=blobdiff_plain;f=lib%2FNDWeb.pm;h=313ba3369911b6c2adc235e7908d0329ad19fe7c;hb=4f142aefe97e62d8510e8f4c69e18cdad8766d13;hp=df1da1748d850eaa9d37f0250fe5b2c8afdb9fff;hpb=11149303e8c0c031f5e08c5792930b490ba4a30b;p=ndwebbie.git diff --git a/lib/NDWeb.pm b/lib/NDWeb.pm index df1da17..313ba33 100644 --- a/lib/NDWeb.pm +++ b/lib/NDWeb.pm @@ -29,27 +29,33 @@ our $VERSION = '0.01'; __PACKAGE__->config( name => 'NDWeb' ); __PACKAGE__->config->{'Plugin::Authentication'}{'use_session'} = 1; __PACKAGE__->config(session => { - storage => "/tmp/ndweb-$>/sesession", + storage => "/tmp/ndweb-$>/session", directory_umask => 077, + expires => 300, + verify_address => 1, }); __PACKAGE__->config( cache => { backend => { class => "Cache::FileCache", cache_root => "/tmp/ndweb-$>", + namespace => "cache", + default_expires_in => 3600, directory_umask => 077, }, }); __PACKAGE__->config( page_cache => { set_http_headers => 1, + disable_index => 1, }); - +__PACKAGE__->config( default_model => 'Model'); # Start the application __PACKAGE__->setup(qw/ -Debug ConfigLoader Static::Simple + Unicode Authentication Authentication::Store::NDWeb @@ -58,25 +64,48 @@ __PACKAGE__->setup(qw/ Authorization::Roles Authorization::ACL + Session::DynamicExpiry Session Session::Store::File Session::State::Cookie + Compress::Gzip + Compress::Deflate + Cache PageCache /); __PACKAGE__->deny_access_unless('/users',[qw/admin_users/]); +__PACKAGE__->deny_access_unless('/alliances',[qw/alliances/]); __PACKAGE__->deny_access_unless('/alliances/resources',[qw/alliances_resources/]); __PACKAGE__->deny_access_unless('/graphs/alliancevsintel',[qw/graphs_intel/]); __PACKAGE__->deny_access_unless('/graphs/avgalliancevsintel',[qw/graphs_intel/]); __PACKAGE__->deny_access_unless('/members',[qw/members/]); +__PACKAGE__->deny_access_unless('/members/defenders',[qw/members_defenders/]); __PACKAGE__->deny_access_unless('/covop',[qw/covop/]); -__PACKAGE__->deny_access_unless('/calls/list',[qw/calls_list/]); -__PACKAGE__->deny_access_unless('/calls/postcallcomment',[qw/calls_edit/]); -__PACKAGE__->deny_access_unless('/calls/postcallupdate',[qw/calls_edit/]); -__PACKAGE__->deny_access_unless('/calls/postattackerupdate',[qw/calls_edit/]); +__PACKAGE__->deny_access_unless('/calls',[qw/calls_edit/]); +__PACKAGE__->allow_access_if('/calls/index',[qw/calls_list/]); +__PACKAGE__->allow_access_if('/calls/list',[qw/calls_list/]); +__PACKAGE__->allow_access_if('/calls/edit',[qw/members/]); +__PACKAGE__->allow_access_if('/calls/findCall',[qw/members/]); +__PACKAGE__->deny_access_unless('/raids',[qw/raids_edit/]); +__PACKAGE__->allow_access_if('/raids/index',[qw//]); +__PACKAGE__->allow_access_if('/raids/view',[qw//]); +__PACKAGE__->allow_access_if('/raids/targetcalc',[qw//]); +__PACKAGE__->allow_access_if('/raids/findRaid',[qw//]); +__PACKAGE__->allow_access_if('/raids/log',[qw//]); +__PACKAGE__->deny_access_unless('/intel',[qw/intel/]); +__PACKAGE__->deny_access_unless('/intel/members',[qw/intel_members/]); +__PACKAGE__->deny_access_unless('/intel/member',[qw/intel_member/]); +__PACKAGE__->deny_access_unless('/intel/naps',[qw/intel_naps/]); +__PACKAGE__->deny_access_unless('/jsrpc',[qw//]); +__PACKAGE__->allow_access_if('/jsrpc/end',1); +__PACKAGE__->deny_access_unless('/forum/allUnread',[qw//]); +__PACKAGE__->deny_access_unless('/forum/privmsg',[qw//]); +__PACKAGE__->deny_access_unless('/settings',[qw//]); +__PACKAGE__->deny_access_unless('/textexport/alliance',[qw/textexport_alliance/]); =head1 NAME