Re: @authenticate_form usage and functional testing

2010-10-08 Thread Ian Jamieson
On Tue, Oct 5, 2010 at 11:34 PM, Ryan McKillen wrote: > If the auth token is available via some other URL, doesn't the defeat the > point? The site attempting to forge could go to that same URL, get the > token, then forge the request. > > > On Tue, Oct 5, 2010 at 12:58 AM

Re: @authenticate_form usage and functional testing

2010-10-05 Thread Ian Jamieson
I don't know enought to answer, I can only give an example of how I tested forms with auth tokens. This is a few months ago now, so I'm a bit fuzzy on why I did it like this and hope others have better examples. In routing.py: map.connect('authToken', '/accounts/authtoken', controller='accoun

Re: best practices when writing controllers

2010-04-06 Thread Ian Jamieson
I REALLY like to keep things separated and I like my functions to be small, within reason. However I am making the assumption that myself and anyone else who comes back to change the code will be using tools that let them index or tag the source, enabeling them to hit some shortcut on a function to

Re: Anyone besides me using stored procedures?

2009-08-26 Thread Ian Jamieson
I'm not using stored procedures but I used too. I have a schema that's quite relational and I don't know if its me or what sometimes orm doesn't always suit. Prolly me thinking more relational than oo at the time the basic schema was made That said sqlalchemy helps me a lot in both orm and when I

Re: Controlling access to static files.

2009-08-24 Thread Ian Jamieson
ime config ini file. from pylons import app_globals from paste.fileapp import FileApp def file(name): fullPath = app_globals.pdf_files%name return forward(FileApp(fullPath)) Thanks again On Tue, Aug 25, 2009 at 2:20 AM, kochhar wrote: > > Ian Jamieson wrote: > > I have bee

Controlling access to static files.

2009-08-24 Thread Ian Jamieson
Hi I have been given a bunch of pdf files, now I need to control which sessions access which files. I'm not currently using an authorization package, I am just using sessions. My first thought was that I'd need to return a file object from a controller's action, and I am thinking of using one of

Re: Plons mysql

2009-06-28 Thread Ian Jamieson
Thank you, many points to consider.I haven't intentionally used 'deferring' before, I'll look into that. On Mon, Jun 29, 2009 at 11:32 AM, Mike Orr wrote: > > On Sun, Jun 28, 2009 at 6:31 PM, Ian Jamieson wrote: > > I have a similar question, but what I&#x

Re: Plons mysql

2009-06-28 Thread Ian Jamieson
I have a similar question, but what I'm interested in is how to deal with a large number of records? In the previous example if there are thousands of users and paginate ended up with something like 200 pages. Suppose one day I had to do some sort of online report, how do I try not use all the s