Yes, you are right, we should take into account all this issues.
May be we could look into other web frameworks. For example, Zend
Framework can be configured with few levels of configuration (I mean
"production", "staging", "development", ...
http://framework.zend.com/docs/quickstart/create-your-project).
Meanwhile Django has boolean DEBUG configuration option. But web2py is
glorious by it's zero configuration, so we should avoid redundant
config options.
How about adding new command line option --debug?
On Aug 18, 12:18 pm, mdipierro <mdipie...@cs.depaul.edu> wrote:
> I am afraid it is a little more complex than that.
>
> - a local user is not necessarily the administrator
> - the server may be behind a proxy so all users are local users
> - request.client can be spoofed by remote malicious clients
>
> it is possible to detect if the user is the administrator by checking
> a cookie (using gluon.fileutils.check_credentials('admin')) but
> it is possible (although very rare) that the ticket itself cannot be
> displayed by admin (because admin is not installed, because admin has
> a bug, because the ticket is malformed) and we still want to see the
> ticket number so we can access it manually
>
> Anyway. In principle, I am not opposed to this change but let's give
> this some thought ad hear more opinions.
>
> Massimo
>
> On Aug 18, 3:08 am, sgtpep <danil.m...@gmail.com> wrote:
>
>
>
> > To achieve such behavior I've added some code in two places in gluon/
> > main.py:
>
> > is_local_user = request.client == request.env.http_host.split
> > (':')[0]
> > if is_local_user:
> > # redirecting to error ticket
> > return HTTP(303, error_message_ticket
> > % dict(ticket=ticket), Location="/admin/default/
> > ticket/%s"
> > % ticket).to(responder)
> > else:
> > # displaying error ticket url
> > return HTTP(http_error_status, error_message_ticket
> > % dict(ticket=ticket), web2py_error='ticket %s'
> > % ticket).to(responder)
>
> > On Aug 18, 11:44 am, sgtpep <danil.m...@gmail.com> wrote:
>
> > > Hi Massimo and all web2piers!
>
> > > Displaying a link to ticket on error for visitor is a very nice idea.
> > > But how about displaying full ticket with error traceback at once if
> > > the visitor is administrator. This will prevent me, developer, from
> > > clicking on ticket link every time the error occurs.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"web2py-users" group.
To post to this group, send email to web2py@googlegroups.com
To unsubscribe from this group, send email to
web2py+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/web2py?hl=en
-~----------~----~----~----~------~----~------~--~---
