> >
> > Obviously, this function cannot change in behaviour or name, so I
> > suggest altering the docs, dropping the clause about indicating that
> > the user has provided username and password to make it clearer what
> > this method does.
>
> It does prove that they've authenticated, in that
On Feb 23, 2012 3:41 PM, "Tom Evans" wrote:
>
> Hi all
>
> I don't like this function that much. It doesn't actually check
> whether users are authenticated - which is to say, they have presented
> credentials which we have accepted and authorized them to use to the
>