[web2py] Re: restricting load calls with its html parent permission

2016-03-14 Thread Ben Lawrence
Thanks Anthony. It took me a while to get this to work. There were two things in my code that that made calling the LOAD return a "Not Authorized" 1. {{('message' in globals())}} at the top of the calling html file. I had to delete this. 2. LOAD(... ajax=False, user_signature=True) i.e. I have

[web2py] Re: restricting load calls with its html parent permission

2016-03-07 Thread Anthony
You can use a digital signature: http://web2py.com/books/default/chapter/29/04/the-core#Digitally-signed-urls When creating the component, do LOAD(..., user_signature=True). Then decorate your component actions with @auth.requires_signature(). Anthony On Monday, March 7, 2016 at 3:58:25 PM UTC