If I have nested controllers like so:
class A1( RootController ):
A2 = identity.SecureObject( A2, identity.in_group( 'test' ) )
class A2( Controller ):
@expose( )
def meth2( self ): return dict( )
A3 = A3( )
class A3( Controller ):
@expose( )
def meth3( self ): return dict( )
then access to /A1/A2/meth2 is limited, as expected, by the
identity.SecureObject construction. But if I access /A1/A2/A3/meth3
there is no access limitation! I would have thought that if there is
identity involved anywhere in the object dispatch chain access will be
limited accordingly. Is it a feature or a bug?
I'm using tg 1.1b3
Cheers,
Daniel
--
Psss, psss, put it down! - http://www.cafepress.com/putitdown
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"TurboGears" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/turbogears?hl=en
-~----------~----~----~----~------~----~------~--~---
