On Tue, 2010-10-26 at 02:54 -0600, Shane Hathaway wrote:
> [The BFG Trac instance seems to be in disrepair, so I'm re-reporting 
> this here.]
> The application below should disallow the user from seeing the view 
> named "x", while allowing the user to see the view named "test", which 
> uses view_execution_permitted() to show whether the user is allowed to 
> see "x".  In BFG 1.3b1, the "test" view says the user is allowed to see 
> "x", which is incorrect: the user is never allowed to see "x" under any 
> version of BFG.

<snip example>

> My guess is this can be fixed by changing line 989 of configuration.py 
> to refer to "derived_view" instead of "view".

Fantastic bug report and diagnosis.  You are correct.  I'll fix it and
add a test.

> BTW, this seems to be yet another good release!


- C

Repoze-dev mailing list

Reply via email to