Re: [web2py] Re: making changes in web2py

2010-02-04 Thread Jonathan Lundell
On Feb 3, 2010, at 9:38 PM, Thadeus Burgess wrote: > -1 for admin username > +1 for anti-brute-forcing. If incorrect password typed 3 times, ban > the IP permanently until you log into ssh and edit a pickled file. We had a longish thread on this general subject a while back. I could probably fin

Re: [web2py] Re: making changes in web2py

2010-02-04 Thread Timothy Farrell
+1 for anti-brute-forcing -1 for having to edit a pickled file to remove the offending IP. Surely you guys have used a broken keyboard before and typed in a password 10 times before realizing that your keyboard is broken. I recommend locking it out for a time period. You could add a value to

Re: [web2py] Re: making changes in web2py

2010-02-04 Thread Wes James
On Wed, Feb 3, 2010 at 6:07 PM, mdipierro wrote: > I am confused. appadmin does not requires any. appadmin, by default, > required admin (perhaps you refer to that). appadmin predates auth. If > your app needs a more complex appadmin authentication you should > connect to the auth of the app. oop

[web2py] Re: making changes in web2py

2010-02-03 Thread mdipierro
I agree. I would take this path. On Feb 3, 11:38 pm, Thadeus Burgess wrote: > -1 for admin username > +1 for anti-brute-forcing. If incorrect password typed 3 times, ban > the IP permanently until you log into ssh and edit a pickled file. > > -Thadeus > > On Wed, Feb 3, 2010 at 7:07 PM, mdipierro

Re: [web2py] Re: making changes in web2py

2010-02-03 Thread Thadeus Burgess
-1 for admin username +1 for anti-brute-forcing. If incorrect password typed 3 times, ban the IP permanently until you log into ssh and edit a pickled file. -Thadeus On Wed, Feb 3, 2010 at 7:07 PM, mdipierro wrote: > I am confused. appadmin does not requires any. appadmin, by default, > requ

[web2py] Re: making changes in web2py

2010-02-03 Thread mdipierro
I am confused. appadmin does not requires any. appadmin, by default, required admin (perhaps you refer to that). appadmin predates auth. If your app needs a more complex appadmin authentication you should connect to the auth of the app. admin does not no need more than a passoword because there is

Re: [web2py] Re: making changes in web2py

2010-02-03 Thread Wes James
On Wed, Feb 3, 2010 at 1:48 PM, mdipierro wrote: > >> >> By the way  Massimo, will you take a patch to add a username to >> appadmin?  If not, I'm learning a few things on the way, anyway. > > please explain more. > appadmin only uses a password to login. I'm putting in a username too so it r

[web2py] Re: making changes in web2py

2010-02-03 Thread mdipierro
On Feb 3, 12:50 pm, Wes James wrote: > adding username to appadmin ;) > > I did hg clone of 1.74.10 > > I start making some changes > > I then do hg export fig  the only thing i see is a pending change to > the Makefile of the version change.  Just a side note, I look in the > Makefile and it lo

Re: [web2py] Re: making changes in web2py

2010-02-03 Thread Wes James
adding username to appadmin ;) I did hg clone of 1.74.10 I start making some changes I then do hg export fig the only thing i see is a pending change to the Makefile of the version change. Just a side note, I look in the Makefile and it looks like the change is already there. Not sure why. I

[web2py] Re: making changes in web2py

2010-02-03 Thread mdipierro
Out of curosity... What kind of changes are you making to web2py? On Feb 3, 11:02 am, Wes James wrote: > Say I do: > > hg clone web2py > > I make changes to the code, then later another update comes out for > web2py and I want my changes added to the update.  Can someone help me > with this proce