> My desire is REMOVE the table-only aspect of permissions, making them > optional, like described in the book. The concept is perfect as is. > > The fact is web2py doesn't work as described in the book.
I understand everything you say but this. You can just say: db.auth_permission.table_name.requires = None or db.auth_permission.table_name.requires = IS_IN_SET(whatever)

