In the control panel I built I use URL(..., user_signature=True) and 
@auth.requires_signature() to secure the urls.

I the init application I built I have various links to a particular 
function with different 
combinations of args and vars. I want to limit access to that function so 
only the 
explicitly generated links will work i.e. prevent users from generating 
their own combinations of args and vars. 

Is it possible to digitally sign the allowed URLs and check the signature 
in the action to prevent any other URLs from working, without visitors 
being logged in?


Kind regards,

Annet

-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to web2py+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/web2py/7eb9e6e0-92bd-4316-b209-d7bbe039d6cdn%40googlegroups.com.

Reply via email to