Hi,

Just wanted to say that we found a bug in 1.99.2 when using XMLRPC
services with the @auth.requires_login decorator using basic
authentication.

It looks like some code was refactored out of requires_login into a
generic requires method which might be the cause of the problem.

A quick hack was to change the following code, but obviously that
won't work very well for people who aren't using basic authentication.

    def is_logged_in(self):
        """
        checks if the user is logged in and returns True/False.
        if so user is in auth.user as well as in session.auth.user
        """
        if self.user:
            return True
        return False

to:

    def is_logged_in(self):
        """
        checks if the user is logged in and returns True/False.
        if so user is in auth.user as well as in session.auth.user
        """
        if self.basic() and self.user:
            return True
        return False

Cheers,
Robin

Reply via email to