Re: pyramid AuthTktAuthenticationPolicy security questions

On Sunday, 30 June 2013 03:05:39 UTC-7, BINLEI XUE wrote: Let me assume the following conditions: 1. I want to get a user's data of a pyramid made website. assume the website as target. 2. I know the user_id, assume the target_id 3. I know the pyramid app use AuthTktAuthenticationPolicy and

Re: Stored procedures and SQLAlchemy

On Monday, 24 June 2013 22:58:36 UTC-7, ucs wrote: I have and do. This are my experiences for an now outdated version of SA (3.6), so your mileage may vary. I'll get to the newer versions when I upgrade, but considering nearly half a million lines of code that's probably not going

Re: How to implement hierarchical authorization schemes

I've recently implemented a role based access control module (rbac) using sqlite3. I found it easier to think in terms of roles instead of groups, where users have role(s) and permissions are applied to roles (roles can be nested). To avoid always reading the rbac database for user specific

Re: How to implement hierarchical authorization schemes

I dropped the Pyramid auth system. I found it too hard to work with , and too much of a resource strain. Instead of trying to fit my needs into it, I just built out my own solution from scratch. I could eventually have gotten my solution done with Pyramid's auth -- and we'll probably end up

AngularJS and Pyramid: Directory Structure

Hi folks, I'm starting a project using AngularJS, and I was wondering what others using AngularJS do for directory structure? Do you follow the app/, etc. directories used by AngularJS? I started with my own directory structure, but things don't seem to want to work nicely. I'm trying to use

Re: AngularJS and Pyramid: Directory Structure

I use this: /project README.rst setup.py /package /js /css /lib module.py othremodule.py __init__.py The reason I put the js code inside the Python package is so that I can refer to them with asset specifications when generating routes. I put the third party libs, such

Re: How to implement hierarchical authorization schemes

Thanks Peter Jonathan. I did start with my own custom libraries and decorators but then decided to work within the auth framework itself for the moment. The hope is to cache the crap out of the entire user model set and hope its performant enough. The other thing I am trying is to preload

Re: How to implement hierarchical authorization schemes

If you're caching SqlAlchemy data, convert it to a dict first and do your caching/operations on that; otherwise you'll deal with performance issues from session merging. -- You received this message because you are subscribed to the Google Groups pylons-discuss group. To unsubscribe from this

pyramid.security remember/group_find and custom user_id

Hi All. I haven't tried this yet, but intend to do so soon. Basically I was wondering if its possible pass in a dict to both functions instead of a user_id? I tried perusing the source, but cannot find the implementation of policy.remember. Thanks. AM -- You received this message because

Re: pyramid.security remember/group_find and custom user_id

Ah it can't. userid_type_decoders = { 'int':int, 'unicode':lambda x: utf_8_decode(x)[0], # bw compat for old cookies 'b64unicode': lambda x: utf_8_decode(b64decode(x))[0], 'b64str': lambda x: b64decode(x), } userid_type_encoders = { int: