This has been fixed and 2.0.1 is now up on the site. I will be doing an official announcement very soon.
On Fri, Jun 19, 2009 at 8:32 PM, Jorge Vargas<[email protected]> wrote: > > Hello Guys, > > Today on IRC diegows reported a bug with CrudRestController (from > tgext.crud) which we later track to a bug inside TG that affect > CrudRestController, RestController and all their subclases. > > Please note: > - AdminController is not affected > - TG2.1 is not affected. > > It basically boils down to RC not having a call to check for the > security of allow_only, due to > > Which was introduced during the final set of Beta released but who > cares now :) no one should be running anything older than 2.0 anyway. > > That said a fix has been code and it's on r6573 of > http://svn.turbogears.org/branches/2.0 (remember nothing else should > go to trunk as we are moving to hg) > > I already talked to Mark and we'll have a 2.0.1 release today or at > most tomorrow. > > > > -- Mark Ramm-Christensen email: mark at compoundthinking dot com blog: www.compoundthinking.com/blog --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears Trunk" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/turbogears-trunk?hl=en -~----------~----~----~----~------~----~------~--~---
