如何为特定的HTTP方法类型注册Plone视图

Question

I would like to be able to register Views in Plone only for a particular HTTP method type, eg. for POST only, or only for particular Accept: header submitted by client.

I know it is not really possible to configure a View that way using regular ZCML configuration directives.

Are there other mechanisms that could be utilized for this purpose, short of writing a proxy view that delegates the request to other views per HTTP method and so on?

Answer 1

For the "post only" protection you can also use the inner features of plone.protect :

@protect(PostOnly)
...

While for the accept header I fear you must inspect the request data manually.

Answer 2

Typically most views follow the update/render pattern, and generally it makes sense to put that in the update method, a common location to do permission/access/data integrity checks like other various libraries. A complete demonstration follows:

from AccessControl import Unauthorized
from zope.publisher.browser import BrowserPage

class PostOnlyPage(BrowserPage):

    def update(self):
        if not self.request.method == 'POST':
            raise Unauthorized

    def render(self):
        return 'A POST only render'

    def __call__(self):
        self.update()
        return self.render()

If you are doing this to make existing libraries (such as z3c.form ) to enforce access methods you can consider doing something like:

class StrictPostForm(z3c.form.form.PostForm):
    def update(self):
        if not self.request.method == 'POST':
            raise Unauthorized
        super(StrictPostForm, self).update()