What happens when it gets to this part of the code in 
/controllers/appadmin.py: 
https://github.com/web2py/web2py/blob/R-2.12.3/applications/welcome/controllers/appadmin.py#L55

Does it call gluon.fileutils.check_credentials(request)? What is in the 
admin session at that time? Can you access the admin app at this point, or 
only the appadmin controller?

Anthony

On Thursday, September 24, 2015 at 4:26:15 PM UTC-4, Karl-Thomas Schmidt 
wrote:
>
> I confirm, i can access appadmin, if i enter 
> https://my.domain.somewhere/myapp/appadmin without beeing asked for admin 
> password. This happens with all cookies deleted and explictly logout of 
> former 
> sessions too. 
>
> Can someone confirm this? 
>
> 2.12.3-stable+timestamp.2015.08.19.00.18.03 
> (Running on nginx/1.6.2, Python 2.7.9) 
>
>
> Am Dienstag, 15. September 2015, 09:41:15 schrieb Leonel Câmara: 
> > Errr appadmin by default asks for the admin interface password. Are you 
> > sure you haven't already entered it? 
>
>

-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to web2py+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to