[web2py] Re: Non-users getting permissions by setting auth.settings.everybody_group_id?

2016-11-08 Thread Anthony
On Monday, November 7, 2016 at 8:37:43 AM UTC-5, Horst Horst wrote: > > Thanks for the explanation, Anthony! It seems I had different expectations > regarding the definition of "everybody", but I guess either way makes sense. > In this context "everybody" means all registered users. What else

[web2py] Re: Non-users getting permissions by setting auth.settings.everybody_group_id?

2016-11-07 Thread Horst Horst
Thanks for the explanation, Anthony! It seems I had different expectations regarding the definition of "everybody", but I guess either way makes sense. On Thursday, November 3, 2016 at 3:58:50 AM UTC+1, Anthony wrote: > > Perhaps the documentation could explain this better, but the >

[web2py] Re: Non-users getting permissions by setting auth.settings.everybody_group_id?

2016-11-02 Thread Anthony
Perhaps the documentation could explain this better, but the auth.has_permission method is designed to check whether a specific user or specific group has a particular permission. It does not check whether the current user is logged in. If you do not specify either the user_id argument or the