# -*- coding: utf-8 -*-
import logging

from pylons import request, tmpl_context as c

from {{package}}.lib.base import BaseController, render

log = logging.getLogger(__name__)

from {{package}}.model import *
from {{package}}.lib import auth
from {{package}}.lib.decorators import authorize
from {{package}}.lib.auth.permissions import SignedIn

class DemoController(BaseController):

    # Need to protect an entire controller?
    # Decorating __before__ protects all actions
    
    # @authorize(SignedIn())
    def __before__(self):
        pass
    

    def index(self):
        c.users = meta.Session.query(User).all()
        c.groups = meta.Session.query(Group).all()
        c.permissions = meta.Session.query(Permission).all()
        # If signed in, get details
        c.user = auth.get_user()
        c.title = 'Public'
        return render('test.mako')
    

    # Need to protect just a single action?
    # Do it like this ....
    @authorize(SignedIn())
    def privindex(self):
        c.users = meta.Session.query(User).all()
        c.groups = meta.Session.query(Group).all()
        c.permissions = meta.Session.query(Permission).all()
        # Use this for obviousness
        # c.user = auth.get_user()
        # or this for directness
        c.user = request.environ['AUTH_USER']
        c.title = 'Private'
        return render('test.mako')