>From Yarko:
#
#...@user.is_logged_in
#def my secure function
#
#A user (class) validating access to sensitive information.... ugh!

Perhaps I am a little lost here Yarko, what would then be the
alternative to the above syntax? - I am asking this because at least
in the Zope realm, this is rather common (i.e.
AUTHENTICATED_USER.has_role([rolelist] or even
AUTHENTICATED_USER.has_permissions(permission, object)) though
security implementation can obviously be applied differently, the
examples I am stating are relatively common and I don't see this being
an issue for any of the security purists out there. I think I am
missing something here.

Thanks,

-- Julio

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"web2py Web Framework" group.
To post to this group, send email to web2py@googlegroups.com
To unsubscribe from this group, send email to 
web2py+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to