Hello Guys,

Today on IRC diegows reported a bug with CrudRestController (from
tgext.crud) which we later track to a bug inside TG that affect
CrudRestController, RestController and all their subclases.

Please note:
- AdminController is not affected
- TG2.1 is not affected.

It basically boils down to RC not having a call to check for the
security of allow_only, due to

Which was introduced during the final set of Beta released but who
cares now :) no one should be running anything older than 2.0 anyway.

That said a fix has been code and it's on r6573 of
http://svn.turbogears.org/branches/2.0 (remember nothing else should
go to trunk as we are moving to hg)

I already talked to Mark and we'll have a 2.0.1 release today or at
most tomorrow.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"TurboGears Trunk" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/turbogears-trunk?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to