# coding: utf-8
import os
import urllib
import tornado.web
from mongoengine import DoesNotExist
from apps.accounts.models import User
import connect_redis
redis_connection = connect_redis.connect_to_redis()
class BaseHandler(tornado.web.RequestHandler):
def check_permission(self, action):
user = self.get_current_user()
admin = self.is_admin_user()
if action in self.perm_public or (user and action in self.perm_user) or (admin and action in self.perm_admin):
pass # ok
else:
self.raise403()
def raise400(self, msg=None):
raise tornado.web.HTTPError(400, msg or 'Invalid request')
def raise401(self, msg=None):
raise tornado.web.HTTPError(401, msg or 'Not enough permissions to perform this action')
def raise403(self, msg=None):
raise tornado.web.HTTPError(403, msg or 'Not enough permissions to perform this action')
def listen_queue(queues=['default']):
redis_connection = connect_redis.connect_to_redis()
with Connection(redis_connection):
worker = Worker(map(Queue, queues))
worker.push_exc_handler(task_timeout_handler)
worker.work()
# coding: utf-8
import os
import urllib
import tornado.web
from mongoengine import DoesNotExist
from apps.accounts.models import User
import connect_redis
redis_connection = connect_redis.connect_to_redis()
class BaseHandler(tornado.web.RequestHandler):
def prepare(self):
self.clear_header('Server')
self.set_header('X-FRAME-OPTIONS', 'Deny')
self.set_header('X-XSS-Protection', '1; mode=block')
self.set_header('X-Content-Type-Options', 'nosniff')
self.set_header('Strict-Transport-Security', 'max-age=31536000; includeSubdomains')
def check_permission(self, action):
user = self.get_current_user()
admin = self.is_admin_user()
if action in self.perm_public or (user and action in self.perm_user) or (admin and action in self.perm_admin):
pass # ok
else:
self.raise403()
def raise400(self, msg=None):
raise tornado.web.HTTPError(400, msg or 'Invalid request')
def listen_queue(queues=['default']):
redis_connection = connect_redis.connect_to_redis()
with Connection(redis_connection):
worker = Worker(map(Queue, queues))
worker.push_exc_handler(task_timeout_handler)
worker.work()
