Afaik this is remedied with 2.1 - there those Special Methods are based in a New decorator.
Diez Von meinem iPhone gesendet Am 06.12.2009 um 13:17 schrieb Sergei Beilin <[email protected]>: > Hi friends! > > How does one restrict acces to ``http://localhost:8080/lookup'' if one > uses lookup() in the root controller and so it must be @expose()d, and > when @expose()d, the request to ``http://localhost:8080/lookup'' > returns something like <bound method RootController.default of > <pyramid.controllers.root.RootController object at 0xb413b0c>>() > > Could it be a potential security issue? > > -- > With nest regards, > Sergei A. Beilin > > -- > > You received this message because you are subscribed to the Google > Groups "TurboGears" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected] > . > For more options, visit this group at > http://groups.google.com/group/turbogears?hl=en > . > > -- You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/turbogears?hl=en.
