Gustavo,
Any thoughts on V2's availability? By the way, I have notice that you are very good on supporting your tool downstream. That is great to see. Good Job KMCB On Jul 17, 8:23 pm, Gustavo Narea <[email protected]> wrote: > Hello, > > Sorry for joining so late. > > I'm afraid there's no sane/DRY way to do this, unfortunately, because of the > way repoze.what 1 works. The problem is that the conditions are attached via > decorators, which can be wrapped around (hidden) by other decorators, which > leaves us with no reliable way to get the predicate. Of course, this doesn't > apply to controller-wide authorization via .allow_only. > > TG2-specific decoration mechanism for actions wouldn't cut it, because it is, > well, TG2 specific, and also because it's likely that you'll use another > decorator which doesn't use this stuff (and then all would be lost again). > > This is one of the top reasons that pushed me to work on repoze.what 2, which > will come to the rescue with the proven authorization goodness called Access > Control Lists. :) > > Cheers, > > -- Gustavo. > > Kirk said:> I'm building a navigation system and only want to show actions > that a user > > is authorized to access. I've been digging around for that documentation > > but can't seem to find it and would appreciate a pointer. > > > BTW, does such a navigation system already exist? Surely so; I'm confident > > I'm not the first person wanting to do this. :-) > > -- > Gustavo Narea <xri://=Gustavo>. > | Tech blog: =Gustavo/(+blog)/tech ~ About me: =Gustavo/about | --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/turbogears?hl=en -~----------~----~----~----~------~----~------~--~---
