I am new to web2py and have what may be a stupid question.

In the application I am designing there are a number of different tables I 
have basic SQLforms to manage. I already have access control being enforced 
in the controller using the appropriate decorators, but I would like to 
further increase security by limiting which options are available in the 
menu. I was trying to use if statements as follows:

(T('Manage'),URL(),URL(),[
    if auth.has_membership('admin'):
        (T('Users'),URL('cms','users_manage')==URL(),URL('cms',
'users_manage'),[]),   
        (T('Groups'),URL('cms','groups_manage')==URL(),URL('cms',
'groups_manage'),[]),
        (T('Exhibits'),URL('cms','exhibits_manage')==URL(),URL('cms',
'exhibits_manage'),[]),
    if auth.has_membership('collection_admin'):
        (T('Display'),URL('cms','display_manage')==URL(),URL('cms',
'display_manage'),[]),
        (T('Items'),URL('cms','items_manage')==URL(),URL('cms',
'items_manage'),[]),
        (T('Categories'),URL('cms','categories_manage')==URL(),URL('cms',
'categories_manage'),[]),
        (T('Tours'),URL('cms','tours_manage')==URL(),URL('cms',
'tours_manage'),[]),
    if auth.has_membership('comment_moderator'):
        (T('Comments'),URL('cms','comments_manage')==URL(),URL('cms',
'comments_manage'),[]),
]),

The error traceback indicates that the if statement is invalid, but I don't 
see why that would be. If someone with more experience could illuminate me, 
I would be much appreciated.

-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to web2py+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to