Hi All,

I am creating a session for a user logged in from facebook and wants
to disable certain functions like retrieve_password, change_password
etc. here is the code for this

        if not auth.is_logged_in():
            user_obj = Storage(user_table._filter_fields(user,
id=True))
            #print 'user is not logged in'
            session.auth = Storage(user=user_obj,
last_visit=request.now, expiration=auth.settings.expiration)
            auth.user = user_obj
            auth.settings.actions_disabled.append('retrieve_password')
            auth.settings.actions_disabled.append('change_password')

but user is still able to access these functions. As an alternate, I
was thinking of creating a group for facebook users and disable these
functions at group level. Is this feasible? Is there any simpler way
without need to create user groups?

Thanks

Reply via email to