Hello, Sorry for joining so late.
I'm afraid there's no sane/DRY way to do this, unfortunately, because of the way repoze.what 1 works. The problem is that the conditions are attached via decorators, which can be wrapped around (hidden) by other decorators, which leaves us with no reliable way to get the predicate. Of course, this doesn't apply to controller-wide authorization via .allow_only. TG2-specific decoration mechanism for actions wouldn't cut it, because it is, well, TG2 specific, and also because it's likely that you'll use another decorator which doesn't use this stuff (and then all would be lost again). This is one of the top reasons that pushed me to work on repoze.what 2, which will come to the rescue with the proven authorization goodness called Access Control Lists. :) Cheers, -- Gustavo. Kirk said: > I'm building a navigation system and only want to show actions that a user > is authorized to access. I've been digging around for that documentation > but can't seem to find it and would appreciate a pointer. > > BTW, does such a navigation system already exist? Surely so; I'm confident > I'm not the first person wanting to do this. :-) -- Gustavo Narea <xri://=Gustavo>. | Tech blog: =Gustavo/(+blog)/tech ~ About me: =Gustavo/about | --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/turbogears?hl=en -~----------~----~----~----~------~----~------~--~---
