Re: Design and code review requested for Django string signing / signed cookies

2010-01-04 Thread Daniel Pope
The timestamp is necessary to limit replay attacks, and so it should probably be more than optional - always issued, and checked by default. The danger is that users might think "signing" is a bulletproof guarantee that the cookie as received is exactly the latest cookie issued to that unique user

Re: Long-term direction for shortcuts

2009-08-04 Thread Daniel Pope
2009/8/3 Jacob Kaplan-Moss : > 1. Propose a new shortcut function. Bonus points for a patch. In all my projects I use a file of my own shortcuts: http://dpaste.com/hold/75120/ NB. I knew as I wrote the MAGICTEMPLATE shortcut that I would never actually use it. The idea was to eliminate ALL of t

Feature request: admin notifications

2009-07-29 Thread Daniel Pope
I wondered if it might be time to consider new features for Django 1.2. My suggestion is a system for administrators to be notified about specific model instances about which they need to take action. At present administrators have to identify where to make changes by browsing the site. Some exam