gistfile1.py

# === configure-aspen.py ===

website.security.timeout = 86400
website.security.httpbasic.enabled = True
website.security.httpdigest.enabled = True
website.security.cookieauth.enabled = True
website.security.cookieauth.timeout = 86400 * 7


# === login / logout ===

if credentials_valid:
    website.security.grant_session(username)

if logout_button_pressed:
    website.security.logout(username)


# === authorization option: declarative ===

roles_allowed = ('admin', 'user')
^L
^L


# === authorization option: user object ===

^L
if user.ANON:
    raise Response(404)
^L