[web2py] authentication question

Hi, I've a function to edit a calendar item and I want to make sure that only an admin user or the user who created this item can edit it. Now I'm doing something like this: @auth.requires_login() def edit(): is_admin = auth.has_membership(role='admin') edited_calendar_item = db.calendar_

[web2py] authentication question

I saw a web app that uses a chrome extension, when you first click on the extension it redirects you to the website to login, then you can use the extension to add bookmarks to the website/your profile on the website. My question is what is the mechanics behind this, is the authentication key store