[web2py:27795] Re: gluon.contrib.login_methods.CasAuth

2009-08-01 Thread Bottiger
Massimo, are you saying that there will never be an official Web2Py incorporation of OpenID and Auth? On Aug 1, 3:54 pm, mdipierro wrote: > Sorry it took me so long. I looked into this and it cannot be done > this way easily as I though. The reason is that OID uses the two > tables you created (

[web2py:27794] Re: Google seems to know Web2Py

2009-08-01 Thread Bottiger
Google has sunk too much time and effort into adapting Django to recommend another framework. They also need to attract more users to GAE which Django has plenty of. On Aug 1, 3:12 pm, mdipierro wrote: > Yes, if only they'd understand we support GAE better than Django does. > Our DAL and our app

[web2py:27793] Re: Possible bug: Select on crud not enforced

2009-08-01 Thread mdipierro
uploading to trunk select requires select permission on table On Aug 1, 6:56 pm, Tito Garrido wrote: > I think so... because people could see the data without permission... > BTW is there a way to change the "linkto" link from "read"  to "update" by a > parameter? > > > > On Sat, Aug 1, 2009 at

[web2py:27792] Re: Possible bug: Select on crud not enforced

2009-08-01 Thread Tito Garrido
I think so... because people could see the data without permission... BTW is there a way to change the "linkto" link from "read" to "update" by a parameter? On Sat, Aug 1, 2009 at 4:01 PM, mdipierro wrote: > > Sorry for the late reply. No select does not enforce Auth. This is not > a bug althou

[web2py:27791] Re: Can I use HTTP PUT method?

2009-08-01 Thread Fran
On Jul 31, 8:28 am, 诚子 wrote: > Hi, I wan't use PUT method and DELETE method,to build a RESTful > service,how to get an PUT method and DELETE data? HTTP DELETE works fine :) Check for it within your controller using: if request.env.request_method == 'DELETE': You can use this to test it: http:

[web2py:27790] Re: gluon.contrib.login_methods.CasAuth

2009-08-01 Thread mdipierro
Sorry it took me so long. I looked into this and it cannot be done this way easily as I though. The reason is that OID uses the two tables you created (and you are correct) and does not use auth_user at all. Hence it cannot take advantage of the functionality of Auth (access control, etc etc.). Op

[web2py:27789] Re: Google seems to know Web2Py

2009-08-01 Thread mdipierro
Yes, if only they'd understand we support GAE better than Django does. Our DAL and our appadmin work on GAE, the Django ORM and Django admin do not as far as I know. Massimo On Aug 1, 3:10 pm, Pynthon wrote: > Watch > this:http://googleappengine.blogspot.com/2009/05/web2py-support-new-datast..

[web2py:27788] Google seems to know Web2Py

2009-08-01 Thread Pynthon
Watch this: http://googleappengine.blogspot.com/2009/05/web2py-support-new-datastore-backend.html --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "web2py-users" group. To post to this group, send email to web2py@goog

[web2py:27787] Re: verification problem

2009-08-01 Thread mdipierro
done now. On Aug 1, 2:51 pm, mattynoce wrote: > i did change the parameters but those were the problem. when it said > "invalid email" that was confusing -- i didn't realize it meant it had > trouble sending the email. when i changed it to a server with the > proper credentials, it worked correc

[web2py:27786] I found this

2009-08-01 Thread mdipierro
http://montreal.en.craigslist.ca/eng/1300545929.html --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "web2py-users" group. To post to this group, send email to web2py@googlegroups.com To unsubscribe from this group, s

[web2py:27785] Re: verification problem

2009-08-01 Thread mattynoce
i did change the parameters but those were the problem. when it said "invalid email" that was confusing -- i didn't realize it meant it had trouble sending the email. when i changed it to a server with the proper credentials, it worked correctly. thank you for that. it might be worthwhile changin

[web2py:27782] verification problem

2009-08-01 Thread mattynoce
hi, i'm having the following problem. i want to have email verification, so i added in the following lines from the pdf on the homepage (and changed the mail settings for my server): from gluon.tools import * mail=Mail() mail.settings.server="smtp.example.com:25" mail.settings.sender="y...@examp

[web2py:27784] Re: verification problem

2009-08-01 Thread mdipierro
Did you change the parameters in the following 3 lines? mail.settings.sender="y...@example.com" mail.settings.login="y...@example.com:password" or None # if no TLS auth.captcha=Recaptcha("public_key", "private_key") If the email is invalid it means it cannot send the email. This may be because i

[web2py:27783] Re: Can I use HTTP PUT method?

2009-08-01 Thread mdipierro
Check if argument parsing with PUT now work in trunk. I think it does. On Aug 1, 7:14 am, Fran wrote: > On Aug 1, 11:49 am, mdipierro wrote: > > > This could be changed but I do not know if put requests contain data > > in body (as post) or url (as get). Can somebody point me to a relevant > >

[web2py:27781] Re: Why

2009-08-01 Thread Yarko Tymciurak
On Sat, Aug 1, 2009 at 1:49 PM, Pynthon wrote: > > I think that I know what you mean. And well it's 3 month's ago when I > played with Python. You mean this > > http://pastebin.com/m59ff6f6f > > Because you want return that data your need to put the [0] after is > because you only want to see the

[web2py:27780] Re: Possible bug: Select on crud not enforced

2009-08-01 Thread mdipierro
Sorry for the late reply. No select does not enforce Auth. This is not a bug although I am open to the possibility of changing the behavior.The problem is that select takes a second argument that is a query therefore there is now way to enforce permission based on the query. We could restrict per

[web2py:27779] Re: Why

2009-08-01 Thread Fran
On Aug 1, 7:49 pm, Pynthon wrote: > Because you want return that data your need to put the [0] after is > because you only want to see the web2py info? So yes: why you don't > need to use this is normal select queries :P? You put the [0] in if you want the 1st row You leave it off if you want al

[web2py:27778] Re: Why

2009-08-01 Thread Pynthon
I think that I know what you mean. And well it's 3 month's ago when I played with Python. You mean this http://pastebin.com/m59ff6f6f Because you want return that data your need to put the [0] after is because you only want to see the web2py info? So yes: why you don't need to use this is normal

[web2py:27777] Re: Why

2009-08-01 Thread Yarko Tymciurak
On Sat, Aug 1, 2009 at 1:22 PM, Pynthon wrote: > > You mean otherwise it gets the whole dict? and now only id: 1 ? I mean select returns a list: [ ] or a list of rows (with only the columns from the table you requested - some, or ALL): [ { ..}, {...}, ...] result[0] is [ {first_row_retur

[web2py:27776] Re: Why

2009-08-01 Thread Pynthon
You mean otherwise it gets the whole dict? and now only id: 1 ? On 1 aug, 19:48, Yarko Tymciurak wrote: > On Sat, Aug 1, 2009 at 12:43 PM, Yarko Tymciurak wrote: > > > On Sat, Aug 1, 2009 at 10:41 AM, Pynthon wrote: > > >> 1. =] Nice! But watch this query: > > >> db( db.leden.info == 'Hans' ).

[web2py:27775] Re: Why

2009-08-01 Thread Yarko Tymciurak
On Sat, Aug 1, 2009 at 12:43 PM, Yarko Tymciurak wrote: > > > On Sat, Aug 1, 2009 at 10:41 AM, Pynthon wrote: > >> >> 1. =] Nice! But watch this query: >> >> db( db.leden.info == 'Hans' ).select( db.leden.id, db.leden.naam ) >> >> It still give me no error so if I enter a where clause the DAL wi

[web2py:27774] Re: Why

2009-08-01 Thread Yarko Tymciurak
On Sat, Aug 1, 2009 at 10:41 AM, Pynthon wrote: > > 1. =] Nice! But watch this query: > > db( db.leden.info == 'Hans' ).select( db.leden.id, db.leden.naam ) > > It still give me no error so if I enter a where clause the DAL will > get all the fields? > > 2. You mean if you don't use [0] this will

[web2py:27773] Re: Table reference question

2009-08-01 Thread Yarko Tymciurak
On Sat, Aug 1, 2009 at 5:00 AM, Fran wrote: > > On Aug 1, 3:32 am, Alastair Medford wrote: > > > db.student.student_id.requires=IS_NOT_IN_DB(db,'student.student_id') > > > db.tasks.student.requires=IS_IN_DB(db,'student.id','%(student_id)s') > > > db.tasks.student.represent=lambda id: db.student[

[web2py:27772] Re: Default CRYPT() is unsecure

2009-08-01 Thread mdipierro
Once more. for people reading this list without technical expertise you are talking about somebody getting access to database data and wanting to decrypt password stored in there using a table lookup. In this case makes very little difference if we use MD5 or SHA512. The ability to decrypt ha

[web2py:27771] Re: Why

2009-08-01 Thread Jonathan Lundell
On Aug 1, 2009, at 8:23 AM, mdipierro wrote: > The way I think of it is > > db() defines a set of records > > .count() counts the records of the set > .delete() deletes the recods > .update() updates the records > .select(...) extracts info from the records ... specifies what and > how. >

[web2py:27770] Re: Default CRYPT() is unsecure

2009-08-01 Thread Francisco Gama
If you follow the first hit on the search suggested by Jonathan you see as hardware requirements: * Intel-based Windows NT/2000/XP PC * Minimum 512MB Ram recommended * Minimum 600Mhz processor recommended If you check out current trends on this matter you see attackers are often using very power

[web2py:27769] Re: Why

2009-08-01 Thread Pynthon
I think I understand it. Well I will just use it =]. Thanks for the fast help and reply s! On 1 aug, 18:08, mdipierro wrote: > On Aug 1, 10:41 am, Pynthon wrote: > > > 1. =] Nice! But watch this query: > > > db( db.leden.info == 'Hans' ).select( db.leden.id, db.leden.naam ) > > > It still give

[web2py:27768] Re: Why

2009-08-01 Thread mdipierro
On Aug 1, 10:41 am, Pynthon wrote: > 1. =] Nice! But watch this query: > > db( db.leden.info == 'Hans' ).select( db.leden.id, db.leden.naam ) > > It still give me no error so if I enter a where clause the DAL will > get all the fields? No. only the fields you asked (id, naam) > 2. You mean if

[web2py:27767] Re: Why

2009-08-01 Thread Pynthon
I fixed question one already :D! On 1 aug, 17:41, Pynthon wrote: > 1. =] Nice! But watch this query: > > db( db.leden.info == 'Hans' ).select( db.leden.id, db.leden.naam ) > > It still give me no error so if I enter a where clause the DAL will > get all the fields? > > 2. You mean if you don't u

[web2py:27765] Re: Why

2009-08-01 Thread mdipierro
On Aug 1, 10:25 am, Pynthon wrote: > So db(here the wheres).select(here the selects) yes > 2. What for list of records do you mean? If I select something with > the ID it give me only info from that id right? Select always returnes a Rows object with is similar to a list. If you select by ID

[web2py:27766] Re: Why

2009-08-01 Thread Pynthon
1. =] Nice! But watch this query: db( db.leden.info == 'Hans' ).select( db.leden.id, db.leden.naam ) It still give me no error so if I enter a where clause the DAL will get all the fields? 2. You mean if you don't use [0] this will be the output output = [1, 'name', 'info'] And to get it nice

[web2py:27764] Re: Why

2009-08-01 Thread Pynthon
So db(here the wheres).select(here the selects) 2. What for list of records do you mean? If I select something with the ID it give me only info from that id right? On 1 aug, 17:20, mdipierro wrote: > On Aug 1, 10:14 am, Pynthon wrote: > > > 1. I think I understand but what If I want only to ge

[web2py:27763] Re: Why

2009-08-01 Thread mdipierro
The way I think of it is db() defines a set of records .count() counts the records of the set .delete() deletes the recods .update() updates the records .select(...) extracts info from the records ... specifies what and how. .select(db.table.field1,db.table.field2) extracts two fields .

[web2py:27762] Re: Why

2009-08-01 Thread mdipierro
On Aug 1, 10:14 am, Pynthon wrote: > 1. I think I understand but what If I want only to get the db.table.id > and the db.table.name fields? Can you or someone please give me some > examples :$? BTW if you do all does it this (in MySQL) > > SELECT * > FROM table > > or SELECT field1, field2 > FR

[web2py:27761] Re: Why

2009-08-01 Thread Pynthon
1. I think I understand but what If I want only to get the db.table.id and the db.table.name fields? Can you or someone please give me some examples :$? BTW if you do all does it this (in MySQL) SELECT * FROM table or SELECT field1, field2 FROM table? 2. Sorry but I still do not understand? Why

[web2py:27760] Re: Why

2009-08-01 Thread Mladen Milankovic
Hi On Saturday 01 August 2009 16:47:41 Pynthon Pynthon wrote: > Hey > > Maybe I will switch back to Web2Py but I still have some questions :P. > > 1. Why it is here http://pastebin.com/f4c8cd718 db().select(query) and here > http://pastebin.com/m291dbd6d db(query).select? Simply: first parenthes

[web2py:27759] Re: Why

2009-08-01 Thread mdipierro
> Maybe I will switch back to Web2Py but I still have some questions :P. > 1. Why it is herehttp://pastebin.com/f4c8cd718db().select(query) and > herehttp://pastebin.com/m291dbd6ddb(query).select? the syntax is always db(query).select(*fields,*attributes) db.table.ALL is not a query, means

[web2py:27758] Re: A good example of a community organization

2009-08-01 Thread mdipierro
I like this. We should make something like it. On Aug 1, 9:23 am, __future__ wrote: > http://railsbridge.org/ --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "web2py-users" group. To post to this group, send email t

[web2py:27757] Why

2009-08-01 Thread Pynthon Pynthon
Hey Maybe I will switch back to Web2Py but I still have some questions :P. 1. Why it is here http://pastebin.com/f4c8cd718 db().select(query) and here http://pastebin.com/m291dbd6d db(query).select? 2. What does here http://pastebin.com/m3869a9b the [0] in the line and at the end? 3. What does he

[web2py:27756] A good example of a community organization

2009-08-01 Thread __future__
http://railsbridge.org/ --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "web2py-users" group. To post to this group, send email to web2py@googlegroups.com To unsubscribe from this group, send email to web2py+unsubscr

[web2py:27755] Re: Can I use HTTP PUT method?

2009-08-01 Thread Fran
On Aug 1, 11:49 am, mdipierro wrote: > This could be changed but I do not know if put requests contain data > in body (as post) or url (as get). Can somebody point me to a relevant > rfc? http://www.ietf.org/rfc/rfc2616.txt F --~--~-~--~~~---~--~~ You received th

[web2py:27754] Re: Can I use HTTP PUT method?

2009-08-01 Thread Alexey Nezhdanov
Probably this: http://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html#sec9.6 I quickly skimmed through it and it seems that syntax is the same as with POST with the difference that transferred contents must be saved under specified path instead of being processed by some back-end. On Saturday 0

[web2py:27753] Re: OpenID for Web2Py

2009-08-01 Thread hcvst
Hi, a first attempt at integrating with auth. http://groups.google.com/group/web2py/browse_thread/thread/1d543bb358411a67/590130b3c38c87af#590130b3c38c87af Regards, HC On Aug 1, 3:20 am, Bottiger wrote: > Is anyone working on incorporating OpenID with auth? I need to know > because I am not

[web2py:27752] Re: Default CRYPT() is unsecure

2009-08-01 Thread mdipierro
I understand all the concerns. for new users let me clarify once more what the issue is: 1) if you use Field(,'password',requires=CRYPT()) the password is stored encrypted using MD5 2) if you use Field(,'password',requires=CRYPT(key='yourkey')) the password is stored encrypted using HMAC

[web2py:27751] Re: file downloading problem

2009-08-01 Thread mdipierro
It may be a file permission issue. On Aug 1, 12:50 am, 陶艺夫 wrote: > Now there are some problems I can't figure out why. > > My application has been doing well under binary web2py with cherrypy. After > I moved it into Apache and mod_wsgi env, some pages would issue an error > ticket and when I c

[web2py:27750] Re: Can I use HTTP PUT method?

2009-08-01 Thread mdipierro
This could be changed but I do not know if put requests contain data in body (as post) or url (as get). Can somebody point me to a relevant rfc? On Jul 31, 9:04 pm, Bottiger wrote: > You will need to do request.body.read() for PUT. Web2Py does not parse > the body of PUT requests. > > Example: >

[web2py:27749] Re: Table reference question

2009-08-01 Thread Fran
On Aug 1, 3:32 am, Alastair Medford wrote: > > db.student.student_id.requires=IS_NOT_IN_DB(db,'student.student_id') > > db.tasks.student.requires=IS_IN_DB(db,'student.id','%(student_id)s') > > db.tasks.student.represent=lambda id: db.student[id].student_id > This seems to accomplish what I was tr