Re: [pylons-devel] Bugs in SessionAuthenticationPolicy

2014-08-06 Thread Karl O. Pinc
On 08/06/2014 10:16:18 AM, Michael Merickel wrote: > It sounds like you are not using the > `pyramid.security.remember(request, userid)` API to store the user in > the session. No, I'm not. The need for this is not mentioned anywhere in the (1.5.1) security chapter. Thanks for the help. Kar

Re: [pylons-devel] Bugs in SessionAuthenticationPolicy

2014-08-06 Thread Michael Merickel
It sounds like you are not using the `pyramid.security.remember(request, userid)` API to store the user in the session. If you would like to store the userid directly you may but you are circumventing the pyramid authentication APIs. As far as the authenticated_userid, this will invoke your callbac

[pylons-devel] Bugs in SessionAuthenticationPolicy

2014-08-06 Thread Karl O. Pinc
Hi, I'm using pyramid 1.5.1 and in trying to figure out SessionAuthenticationPolicy I found problems. I looked at HEAD (I think) on github and problems seem to exist there too. unauthenticated_userid is not documented. The callback function is never called. The debug output is: 2014-08-06 02: