So, I think the middleware should live in some library somewhere, not
in the template itself (what if there's a security fix, do we require
all users to update their generated middleware code?) and I'm fine
with putting it in tgext.authorization.quickstart or
tgext.authorization.helpers or whatever we want to call it.
Alternatively if you feel really strongly that id does not belong in
tgext.authorization we can put it in tg itself
tg.authhelpers.make_who_middleware.

The key thing is that it should be easy to extend, but that those who
don't want to extend it should not have to understand and maintain it.

--Mark Ramm

On Wed, Sep 10, 2008 at 1:48 PM, Gustavo Narea <[EMAIL PROTECTED]> wrote:
>
> On Wednesday September 10, 2008 19:32:25 Lee McFadden wrote:
>> I like the idea of this as it will give a lot of customization options
>> in terms of authentication for advanced users while remaining tucked
>> away for 90% of use cases.
>
> Exactly. It would only be modified by those who need something more advanced.
>
> I also agree that it should not be a problem for those who don't need to
> modify it. Actually, it'd make it easier for those who want something
> different (not necessarily more advanced; the developer may want to use plain
> Htpasswd for authentication, and Htgroup with permissions being stored in INI
> files for authorization, which I consider less complex than using a database
> for everything).
> --
> Gustavo Narea.
> http://gustavonarea.net/
>
> Get rid of unethical constraints! Switch to Freedomware:
> http://softwareliberty.com/
>
>
> >
>



-- 
Mark Ramm-Christensen
email: mark at compoundthinking dot com
blog: www.compoundthinking.com/blog

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"TurboGears Trunk" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/turbogears-trunk?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to