On Thu, Jul 8, 2010 at 3:08 AM, brendon <[email protected]> wrote:
>
> Thanks for your response Branko.
>
> What I ended up doing though was just add an app_processor that checks
> the current url is in the users available urls. If it isnt redirect
> the user to auth_error otherwise return handle().

It's a weird way of doing auth... if that's what you are doing. I
would imagine returning 401 from the controller code would be more
logical/common.

class myctrl:
    def GET(self, args):
        if not is_authenticated(session):
            return somethingthatdoes401butIforgothow()
        # we're authorized, so let's get our groove on
        pass

-- 
Branko Vukelić

[email protected]
[email protected]

Check out my blog: http://www.brankovukelic.com/
Check out my portfolio: http://www.flickr.com/photos/foxbunny/
Registered Linux user #438078 (http://counter.li.org/)
I hang out on identi.ca: http://identi.ca/foxbunny

Gimp Brushmakers Guild
http://bit.ly/gbg-group

-- 
You received this message because you are subscribed to the Google Groups 
"web.py" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/webpy?hl=en.

Reply via email to