Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/pycasbin/postgresql-watcher
PostgreSQL Watcher for PyCasbin
https://github.com/pycasbin/postgresql-watcher
casbin postgres postgresql pycasbin watcher
Last synced: 19 days ago
JSON representation
PostgreSQL Watcher for PyCasbin
- Host: GitHub
- URL: https://github.com/pycasbin/postgresql-watcher
- Owner: pycasbin
- License: apache-2.0
- Created: 2020-12-21T08:15:35.000Z (about 4 years ago)
- Default Branch: master
- Last Pushed: 2024-07-16T15:47:08.000Z (6 months ago)
- Last Synced: 2024-09-18T02:22:45.769Z (4 months ago)
- Topics: casbin, postgres, postgresql, pycasbin, watcher
- Language: Python
- Homepage: https://github.com/casbin/pycasbin
- Size: 44.9 KB
- Stars: 2
- Watchers: 5
- Forks: 8
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
Awesome Lists containing this project
README
# postgresql-watcher
[](https://github.com/pycasbin/postgresql-watcher/actions/workflows/release.yml)
[](https://coveralls.io/github/pycasbin/postgresql-watcher)
[](https://pypi.org/project/casbin-postgresql-watcher/)
[](https://pypi.org/project/casbin-postgresql-watcher/)
[](https://pypi.org/project/casbin-postgresql-watcher/)
[](https://pypi.org/project/casbin-postgresql-watcher/)
[](https://discord.gg/S5UjpzGZjN)
Casbin watcher based on PostgreSQL for monitoring updates to casbin policies.
## Installation
```bash
pip install casbin-postgresql-watcher
```
## Basic Usage Example
```python
from flask_authz import CasbinEnforcer
from postgresql_watcher import PostgresqlWatcher
from flask import Flask
from casbin.persist.adapters import FileAdapter
casbin_enforcer = CasbinEnforcer(app, adapter)
watcher = PostgresqlWatcher(host=HOST, port=PORT, user=USER, password=PASSWORD, dbname=DBNAME)
watcher.set_update_callback(casbin_enforcer.load_policy)
casbin_enforcer.set_watcher(watcher)
# Call should_reload before every call of enforce to make sure
# the policy is update to date
watcher.should_reload()
if casbin_enforcer.enforce("alice", "data1", "read"):
# permit alice to read data1
pass
else:
# deny the request, show an error
pass
```
alternatively, if you need more control
```python
from flask_authz import CasbinEnforcer
from postgresql_watcher import PostgresqlWatcher
from flask import Flask
from casbin.persist.adapters import FileAdapter
casbin_enforcer = CasbinEnforcer(app, adapter)
watcher = PostgresqlWatcher(host=HOST, port=PORT, user=USER, password=PASSWORD, dbname=DBNAME)
casbin_enforcer.set_watcher(watcher)
# Call should_reload before every call of enforce to make sure
# the policy is update to date
if watcher.should_reload():
casbin_enforcer.load_policy()
if casbin_enforcer.enforce("alice", "data1", "read"):
# permit alice to read data1
pass
else:
# deny the request, show an error
pass
```
## Basic Usage Example With SSL Enabled
See [PostgresQL documentation](https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-PARAMKEYWORDS) for full details of SSL parameters.
```python
...
watcher = PostgresqlWatcher(host=HOST, port=PORT, user=USER, password=PASSWORD, dbname=DBNAME, sslmode="verify_full", sslcert=SSLCERT, sslrootcert=SSLROOTCERT, sslkey=SSLKEY)
...
```
## Django setup with casbin django orm adapter
Enforcer and Watcher setup
```
# settings.py
BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
INSTALLED_APPS += [
'casbin_adapter.apps.CasbinAdapterConfig',
]
CASBIN_MODEL = os.path.join(BASE_DIR, 'casbin.conf')
from postgresql_watcher.watcher import PostgresqlWatcher
from casbin_adapter.enforcer import enforcer
watcher = PostgresqlWatcher(host=BANK_CONNECT_APIS_PG_HOST_URL, port=BANK_CONNECT_APIS_PG_PORT,
user=BANK_CONNECT_APIS_PG_USER, password=BANK_CONNECT_APIS_PG_PASSWORD, dbname=BANK_CONNECT_APIS_PG_DBNAME)
def update_enforcer():
print("before loading policy", enforcer)
enforcer.load_policy()
watcher.set_update_callback(update_enforcer)
CASBIN_WATCHER = watcher
```
Usage of enforcer
```
#views.py or any other file
from casbin_adapter.enforcer import enforcer
roles = enforcer.get_filtered_named_grouping_policy("g", 1, str(member_id))
```
### Reload Casbin enforcer
In current setup enforcer does not automatically refresh in memory data, we can call watcher.should_reload() before every data access from enforcer.
```
from setting import watcher
watcher.should_reload()
```
If there are any changes in db this call will refresh in memory data from database
For automatic reloading of data, parent process need to poll child process for messages and call should_reload function if there is any message in pipe between child and parent process