Re: [web2py] Re: Deleting a registered user

2011-02-16 Thread Michele Comitini
Tnx Massimo for your reply. I will make an action for that purpose. I assumed that among Auth actions there would be something like "unregister" which is a functionality that any service with subscription should have. I understand that allowing the user delete all his records is not safe and coul

[web2py] Re: Deleting a registered user

2011-02-16 Thread Massimo Di Pierro
It would be a security hazard to allow a user to delete himself and all records referencing to the user. Moreover it can be clicked accidentally. I think is is better if you create your own action for that. Anyway, instead of auth.profile() you can do crud.update(db.auth_user,auth.user.id) On