You are right there is no check. Perhaps there should be one. Let me
say anyway that the absence of this check does not result in security
problems because has_membership only finds the first entry and
del_membership deletes mutliple entries if found. Moreover it is easy
to add the check as a validator.


On Dec 23, 5:00 pm, villas <[email protected]> wrote:
> When using Auth through appadmin,  I expected that duplicated
> memberships would not be possible.
> I mean,  an individual user should only be able to be a member of each
> group once, right?
> Perhaps that restriction should be enforced.
> - David

--

You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en.


Reply via email to