Ben Yes you read my mind. That is what I was thinking. That seems to be much easier than adding Identity to your app. It also accomplishes 95% of what most people need.
I can only assume that Identity is therefore mainly useful for real industrial strength web apps with *very* complex permission needs. Chris On Dec 26, 7:05 am, Ben Sizer <[EMAIL PROTECTED]> wrote: > I think that you could achieve most of what you need just by having an > is_logged_in attribute in the user's session, which you set when they > enter the correct credentials on your login page. Then you can just > check that before showing certain features, or wrap it in a very > simple decorator to protect entire methods. > > -- > Ben Sizer --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/turbogears?hl=en -~----------~----~----~----~------~----~------~--~---

