282         if deny_read and (not user or deny_read == ['*'] or user in deny_read):

   282         if deny_read and (not user or deny_read == ['*'] or user in deny_read):

   283             raise ErrorResponse(HTTP_UNAUTHORIZED, 'read not authorized')

   283             raise ErrorResponse(HTTP_UNAUTHORIZED, 'read not authorized')

   284 

   284 

   285         allow_read = self.configlist('web', 'allow_read')

   285         allow_read = self.configlist('web', 'allow_read')

   286         result = (not allow_read) or (allow_read == ['*'])

   286         result = (not allow_read) or (allow_read == ['*'])

   288             raise ErrorResponse(HTTP_UNAUTHORIZED, 'read not authorized')

   288             raise ErrorResponse(HTTP_UNAUTHORIZED, 'read not authorized')

   289 

   289 

   290         if op == 'pull' and not self.allowpull:

   290         if op == 'pull' and not self.allowpull:

   291             raise ErrorResponse(HTTP_UNAUTHORIZED, 'pull not authorized')

   291             raise ErrorResponse(HTTP_UNAUTHORIZED, 'pull not authorized')

   292         elif op == 'pull' or op is None: # op is None for interface requests

   292         elif op == 'pull' or op is None: # op is None for interface requests